[ OK ] Started System Logging Service. [ OK ] Found device /dev/ttyS0. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.15.212' (ECDSA) to the list of known hosts. 2020/08/23 10:11:08 fuzzer started 2020/08/23 10:11:09 dialing manager at 10.128.0.26:37207 2020/08/23 10:11:09 syscalls: 3309 2020/08/23 10:11:09 code coverage: enabled 2020/08/23 10:11:09 comparison tracing: enabled 2020/08/23 10:11:09 extra coverage: enabled 2020/08/23 10:11:09 setuid sandbox: enabled 2020/08/23 10:11:09 namespace sandbox: enabled 2020/08/23 10:11:09 Android sandbox: enabled 2020/08/23 10:11:09 fault injection: enabled 2020/08/23 10:11:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/23 10:11:09 net packet injection: enabled 2020/08/23 10:11:09 net device setup: enabled 2020/08/23 10:11:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/23 10:11:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/23 10:11:09 USB emulation: enabled 2020/08/23 10:11:09 hci packet injection: enabled 10:14:06 executing program 0: syzkaller login: [ 340.103757][ T29] audit: type=1400 audit(1598177646.056:8): avc: denied { execmem } for pid=8488 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 341.733417][ T8489] IPVS: ftp: loaded support on port[0] = 21 [ 342.264944][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 342.469225][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.476572][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.486618][ T8489] device bridge_slave_0 entered promiscuous mode [ 342.532055][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.539822][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.549467][ T8489] device bridge_slave_1 entered promiscuous mode [ 342.623257][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.640422][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.695826][ T8489] team0: Port device team_slave_0 added [ 342.709228][ T8489] team0: Port device team_slave_1 added [ 342.755788][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.763743][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.789964][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.806594][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.813935][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.840254][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.905895][ T8489] device hsr_slave_0 entered promiscuous mode [ 342.915880][ T8489] device hsr_slave_1 entered promiscuous mode [ 343.223426][ T8489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.243148][ T8489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.279906][ T8489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.319546][ T8489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.618474][ T3774] Bluetooth: hci0: command 0x0409 tx timeout [ 343.628627][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.669066][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.678248][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.705514][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.733656][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.743668][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.753201][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.760551][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.820228][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.829788][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.839744][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.849189][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.857131][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.866153][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.877103][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.887861][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.898345][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.913692][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.933700][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.943209][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.980192][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.990025][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.000281][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.010135][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.031608][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.089137][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.099067][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.132860][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.204368][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.214440][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.273529][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.283283][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.312559][ T8489] device veth0_vlan entered promiscuous mode [ 344.324392][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.333983][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.376376][ T8489] device veth1_vlan entered promiscuous mode [ 344.456444][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.466721][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 344.476422][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.486432][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 344.518312][ T8489] device veth0_macvtap entered promiscuous mode [ 344.541246][ T8489] device veth1_macvtap entered promiscuous mode [ 344.604467][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.612810][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.622550][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 344.631930][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.641794][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.666288][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.676555][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 344.686969][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:14:11 executing program 0: 10:14:11 executing program 0: 10:14:11 executing program 0: [ 345.698844][ T5] Bluetooth: hci0: command 0x041b tx timeout 10:14:11 executing program 0: 10:14:11 executing program 0: 10:14:12 executing program 0: syz_usb_connect(0x4, 0x113a, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc5, 0x66, 0xaa, 0x40, 0x5ac, 0x8600, 0xfa58, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1128, 0x4, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5b, 0x80, 0x9, 0xe, 0x1, 0x0, 0x20, [@generic={0x9d, 0xc, "d763ed149ace91b9cfc733130f63dc08b836f83dd1cc9b98bd5cdf60dcec77d2e45fc5a9e9435f10ca551c9bd2aa25b071665e03b97b116af7f846ff7cf04164ffc57a9ad46b2cd0dde4ce32cf795805f7e42b2ac64ec9fd1001c7e0f40ef80823fe40c2bdae5b2eb53e12c3e4a27e2ebaedfa2271c049e2867e5852d2e777960c82dae4c6b5fe109d54dad31d3c8aa93abefdcbee1315be59925c"}, @generic={0x53, 0x5, "8505c883f36540b2ef20d0e59bb5ed4a5f2aa6289fa2e40f661436acaa93e489f91e1839da15ddc01cb9d0294dcea531a49da2ab42c2f5aa7a750cb836e873d5dd83237247e157ed9daaa0f6575180fb48"}], [{{0x9, 0x5, 0x1, 0x0, 0x18, 0x2, 0x6, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x101}, @generic={0xbf, 0x11, "21dd8eade59d5e9d9dbffdb16e50ebfe1de22ff77551a58059a3aa4f4491ec37abb2efedfe20333c5cb15defcb831fd1ac11174dcdf1ee552213469d68e4f731847227bf55f8b41b14a14c926ea3d1da533c476b4a7bbf7772f23b41b359e3a06de7fa0984985252f6223aadb9e7077bc1fb79cbc3cd60d877b4244839e256e74a75f7a0fe487cb852d1a7b3e30ddb86a530091b8a980cc2d7df488f3b4024f97dec3cb920f7b01a13dc5f6282c735e696e22c2b92bec6bc9b9c9e2765"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x8, 0x6, 0x80}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x3, 0xa0, 0xff, [@generic={0x93, 0x9, "fd9dbae16cb6a9c6812e6e1e94ff204cac47df6399feb4ff85c5620d47d72b4217be93b632e010ee200504e92c26eeafdf5ac4c3580d71e9f9a4b4bd5e0557005d5cc3bf6cadfd61f7dcb1dac330ed04a538ab9fe21d5e285e094a12ed27614f0b8b9eb63a4b3b537ec2a7f88b9ec57e22593aa937dc586dffc4fd883e76012cd56821209f6a47ae38d677922e3497292a"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x8, 0x7f, 0x70, [@generic={0xb2, 0x21, "7a76cb654f4a96a71ccdba58cdc0efd53ef827fde12ba27496a7bb6404366531519e063017d6ef67d563329572d94e71ded89321419a0bbd5a1ff4a98e34d9110151cd923bd4293d6713fd58ebf4e46204c8624cb175263b8ade2952f444cb44d073a21aaedaf723f9790d74d433f7d47ce5757e1e73fc5048e92b36251b22df427b6f120674134245f2eae5359c1ecf9702515b1d03086ead47c1dc4edcf5d64981313367da3d483625e24a940d4b27"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x1f, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xef}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x80, 0xb7, 0x16}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xd, 0x9}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x1, 0xc0, 0xfb, [@generic={0x41, 0x7, "c68669eae789ce2a0b7c0186c1086c60d13b9a7d9572321799f7442a36f98a6ede980c269a76025357013301d7f63220c8fbfacf52ff333dd33f4f66369b27"}, @generic={0xf8, 0xc, "5e244467163153b48785279abee1fe949211898d845e99e09c0fae45dd507339828e2559dc23084ec4beaccaa9799f93fdbc77b6d71ef4e120ef5e37a5a9713ca88fab8d591ef22515118722dc7764852477327e061c2a072601320e419d9f57fb60d89b52c7f8c5f15026e90ebcfb4029d2fc1035a51f63cc659cd597bda7370eb2f1ff78ef950654d1984d316c9cb414b527fc9799e3e8e63849d2124e9ce6746b31eb383edd703c4268128cf116afff8bc40845ea993c96a68400288dac52fabbe765a0601269fa0091a2edd36170ad5224c7398336c0a26fe0c707a4f1e8682202ca1bcb09e95566458e1f908831123552a5886e"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x7c, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x86, 0x6}]}}]}}, {{0x9, 0x4, 0x71, 0x1f, 0x8, 0xff, 0xff, 0xff, 0x5, [@generic={0x100, 0x10, "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"}], [{{0x9, 0x5, 0x2, 0xc, 0xe3f4bd18034dfdce, 0x9, 0x5, 0x95}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x8, 0x35, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0xfffa}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x20, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9, 0xe8, 0x2, [@generic={0xd5, 0xe, "c60125de5dd10ffde271877d13a215a934fad43d90f37c226a244c77d48f44025a7a8bb60417d5ea9645aaaa2616f5cd326204053bbfb9533118bf254931ac27cc3f9153ed6313233fdaea1a5f4d02b3c9f58762626d26b8363ddae91cb62283ac778d5f7ae048c0332fd092dad17bcbef70292274ad538d44ea17559e4758d87b9139c622c309f9b90f64f9252cbfb6d56817ef69c0fa3688eb79d96a7a900752be0e3bfde632adc56876cf73f2f6c6147cdec4c2a26742c145cd02f8dcf29bea6aa805611a35849e6b18f06867b56ad34f7a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe5}]}}, {{0x9, 0x5, 0x6, 0x12, 0x3ff, 0xff, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x3f}, @generic={0xa, 0x21, "2e9eda079148dc50"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x20, 0x9, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xe0, 0x20, 0x3}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x0, 0x1, 0x98, [@generic={0x70, 0xc, "a6ab22d41c072bf72b6ea071ff17f54c8b9145a3d5beb385f69bbf26b6418e4ab71021332982911d3f64f4e6c48c9a386fe02b25581d4af684279e61d763e7d2b0113e088e26055ea7ab72889307795b6d6854af100b026d801979b9c5e1d028c94d0f86205868d76f5fd0c4b668"}]}}]}}, {{0x9, 0x4, 0x3f, 0x9, 0xc, 0xf6, 0xd9, 0x3b, 0x5, [], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0x80, 0xd, 0x3, [@generic={0x83, 0x4, "17defb4ffe1183a15729891d72e6441245de79c90d1bc29f28898720c35fbcaf04408cd5d2eef0b8532f0437a57854861cfca50cdbdcf80a904fa9d4fc674aa7928ac41a93e7e8b4c92f0741ec779d3325ce3d23698cf654661ba6bed05a3c0be184267c8d8a9b3284378a2ee42d69498a8eb63979f8031ea41eb50774b8266b51"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x80}]}}, {{0x9, 0x5, 0x4, 0xf992ff235f573884, 0x20, 0x1f, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x8, 0x6, 0x6}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x6, 0x8b, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x20, 0x3, 0x2, [@generic={0x2e, 0x1, "6bd08789907c5edd537e602b44e6e26e40e7e0d40fbfd5f1beafbc5b5842045605fe7d12a7f0ef2963531db1"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3df, 0xaa, 0x3f, 0x3, [@generic={0x52, 0xf, "430afd1c81cd401d5b9362ae87c1c7cc9b35c72e5d9df4368a6577b8641161c5c949c9ed45359c464caa87042464e95a2413f2cf4c4d607c344af20f468abb028fa75e7a5655dbe0ff0f8d9bf15f58cc"}]}}, {{0x9, 0x5, 0x83, 0x14, 0x400, 0x40, 0x77, 0x8, [@generic={0x55, 0x30, "7a6534f024a77d86d064d7373b904dadd4f0ab5b94854a197ef4a54d9e1ddea0c1ec199c5fb11d04e2e14d0514559bcc0687099cab0b5a69c5a5ad2f879b848d35026e41cde7bfada782ffac9197a583c5a7e5"}]}}, {{0x9, 0x5, 0x9e, 0x8, 0x200, 0x4, 0x6, 0x7, [@generic={0x6a, 0x30, "5bc590c770593c8a8eef50657b4e24d0648174b6f31192da9e6252273197ee0254d5345ab64310cd47153cb7e1a3222d2cfb42298ad721fd44cb80ccb57b3716e7d6b756e36c63e1399279f6a67fcdd111dd0844dd6a912c1ea19b1c5bc050c4dc0bff04d56d9943"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7f}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0xb8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x5c9}, @generic={0x102, 0x0, "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"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x81, 0x40, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x9}, @generic={0xc9, 0x5, "99d17ab5a907a28300d64d2707d2f5fe990d363e89e8b273fbcba19904286144dfe3be351f2c9de88dec0470962f61263dd0ac2a6557dbe871683a618be40809053d78754437d456c23c2a045d88133cb44c77b75e08fab04c322db7de0120eb7f90df7f562d53d77d1922718b77451673f1de38ac874bd30db5f768579108bc19eb8c147ba2dbdc6cddd96be625daab6386746b0c3524e83f698272d955f276613d8352fec4e79847e0b4c766d48dc2eb815694e314fa3e68c83a263562021630f4263d3380f3"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x0, 0x3, 0x43, 0x1, [@generic={0x25, 0x24, "5a92b0345c30d93912c2da7db9f60e5a17e2554bd658556cde86ff5a6f8fd55f1f9e07"}, @generic={0x6a, 0xd, "112fd2b830f64874c17cd7d74e3e9b22140c60638d1dd9efa60558353a80e55b1896467d571f4ace0eafe24fdee3d93c382d8d1b8ffe0a3231725c6dc6b08b31527004bbe3e6b7b0bfc2c9244258b7f91c412e53b17e7263951fa534df0e0dcf388d73e420fbe5f6"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x0, 0x3d, 0x9}}]}}, {{0x9, 0x4, 0x14, 0xb7, 0xe, 0x98, 0x93, 0xcd, 0x3, [], [{{0x9, 0x5, 0x0, 0x8, 0x40, 0x9, 0x40, 0x2f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0x1, 0x4f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x1, 0x4fda}, @generic={0x64, 0xa, "34c3cd4a50ddf0fcf2ca89bc473cc555c1e8cc292a115dd06127e1fdc279ecb90f5cbd84a42b93c0e56ba47d0922176c2e8e7cb685354e6e3156c80511e928b30f13ba6b6d7f14ac9b9602a7db2a39609eb1320b7e3210da94f268373e8a49f212d3"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3c, 0x50, 0x73, [@generic={0x9e, 0x9, "63f5aa993041a1fc1b0cdaa4b1fd8a70c2594a48a5fcac8a8707a6a8e6491ef8cc5dada46e1eeb8764ec2e6980e9466593dd2bd83f7f9af23688ba94cf4bdf2462dab4cdc97959616e33b7c38187465a41eb0315a744faf49d796ea1cc102024239d51cf0b3024c8111ac69687f4061545ac7b2c524b8d3c2e208267be672745e5a16822577ee9dbe984996d74078f60abee95690ceffea175dcd4fb"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x0, 0x3, 0x7, [@generic={0x14, 0x8, "dbfdcda19b9e220431d066ca57ba48bace0b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x5}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x80, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x7f}, @generic={0xd4, 0x22, "a9ce40c5afc5caa9bbac6168da68f7928c9aea4a8132e62ab13b4b0d11f0db2829e9ac784c14b154d4b664f2d55e713c1c8e566dcdf30d6083a9746ee0dc2c6eb7789b0997902d84a3d2b509722fb4553e6954d55065402b379d272c0c041d1e04cd3892bec4d073c9bbde537aad019403485349b6755dbec86b0203e743c4933e44932bff182216d7bf8d9178ce385c3eff7c8f253dae8cc4dc132df8020ce38ffec55f35027d840aa3788ce4c94f07cecfa4928e5b1e9fda5017c22362836a4b2e422e362c7f9c467d48f7855c9231ee0c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xc, 0x46, 0x8}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0x8, 0x10, 0x33}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x3, 0x80, 0x5, [@generic={0xc9, 0x22, "32b438653c1af2ca6a743abdbc7e046b4f63eb9b3b29ce568da9766df943d1d707e8b93c06b29d072954cf3f7a3589fe9de465015fd86de7d41ee74525d861cbc372ec231a23b1ffdd4aa425b80e8a2d6d43c7ed3cecfe175397b7e2274a1e796007bded8c6e4bd9d95846d3ecb9b93c71e5447784c2b61d2e91ec34521ca05eb39b2fe928471d441a92987ea12975ca33201a31cebd7ba00798b83f070903ec8ca2ac2b091fb01809ba85d857314a279bfafca0937b827e33f796931dab173d3530fb566f41b6"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xf, 0x9, 0xf8, [@generic={0xb6, 0xb, "f1d4bccb27ac390e53244994bbef86f14af6f555e4dea8e22b8abb75ac3c6949de710d9a215996dcfa0bdedac585331b9e454663fd706ea7d8c064917eff17b6fd18497aa548ae6802d05c58b48bbcaaa871c71599882ee63446021e221f2bf83500018ab570eb3838cc7786b5413c79832a4aa6bcc3b095e14a4d81c1c80697be54b8d5f1fc11557dbaf3eeab8f62b903a10ef8a5c6ba94dcc4edeebb55bdf8386f3ba42ceb2eeeaef8bbe6fff9e6132ba3be78"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1f, 0x400}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x8, 0xb6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xaa, 0xffff}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0xc1, 0x64, 0x17, [@generic={0xac, 0x22, "7ac6bd0f348a7593251b26dd4a9eead9529c31001941c2a154f809add59230bb770960c9976ef45d3e471df877f878c9f17fe8464036020a8ec9f56f292bfe33b84b4e4d333fedd527532b96e2faeffff9f888959909a75eecbeb0a0da2b373600db902bc0bdab3817071ac11c437bcfdcee8c9facdc0ac81a6d4aacc10ca29be3d1993aff17180f48115ff79830a41e9f21b5d02cbcdb74a7bca543d0dbc3ebc3eaa045fd49ed0e5a1b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x400}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x1, 0xfd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x420, 0x80, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4a, 0xe6}, @generic={0xe, 0x23, "ad4cc62cf144a703b16390b1"}]}}, {{0x9, 0x5, 0xc14bf1675a31f7ef, 0x2, 0x1f7, 0x7, 0x5, 0x7f}}]}}]}}]}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x7) r2 = dup2(r0, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x21) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x77, &(0x7f0000000040)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={r5, 0x1, 0x4, [0x7, 0x4, 0x8, 0x8001]}, 0x10) openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x680, 0x0) 10:14:12 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') [ 347.299635][ T3223] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 347.667836][ T3223] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 347.676176][ T3223] usb 1-1: config 0 has no interface number 0 [ 347.682670][ T3223] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 347.693024][ T3223] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 347.702657][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.719457][ T3223] usb 1-1: config 0 descriptor?? [ 347.752687][ T8729] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 347.778178][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 347.790187][ T3223] hub 1-1:0.253: bad descriptor, ignoring hub [ 347.796519][ T3223] hub: probe of 1-1:0.253 failed with error -5 [ 347.829184][ T3223] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input5 [ 348.107498][ T3223] usb 1-1: USB disconnect, device number 2 [ 348.906825][ T8662] usb 1-1: new high-speed USB device number 3 using dummy_hcd 10:14:15 executing program 1: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=@srh={0xba, 0x2, 0x4, 0x1, 0x6, 0x48, 0x1, [@ipv4={[], [], @broadcast}]}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xd7, "1f79df1bf92cecc42c6c63241b6dbf95846bfb3f6c49b810631b662868894dde002fdcc601140a6373400aeab014e6deaddb0a33a981b67f3a3192fcce3e338f6e78c353eb6caf04153c52eb9fe03c8184ebea6eb27f5720cc60dacbd15a4291bdaef80e907e549a08a3967d4443a6a4d96f7a3eb19238d085d18467bfd494b5dca46d3e03fa5b4f18a9a93d938bdcd5d9a0bf8d003efbc80ac9ab98729f928b33f0ea6fedc85d51fbf75f26c7ba190c7eea9da504f169776af06a45beb5bca637ab4183e257c57aceb74203ef235ac0d2e2a3116605d0"}, &(0x7f0000000180)=0xdf) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0xa34, 0x4, 0x7f, 0x4, 0xfffffffd, 0x42e, 0x81, r1}, &(0x7f0000000200)=0x20) r2 = openat$bsg(0xffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x84800, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, 0x0, 0x0, {0x0, 0x1, 0xc5d19c544b289296}, 0xfe}, 0x18, &(0x7f0000000300)={&(0x7f00000002c0)}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r3 = mq_open(&(0x7f0000000380)='\x02\x00', 0x40, 0x40, &(0x7f00000003c0)={0x80000000, 0x1c8, 0x3c51, 0xfffffffd}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000400)={0x4, 0x7ff, 0x10000}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000440)={0x0, @reserved}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000500)=0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000540)={0x0, 0x401}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000005c0)={r5, 0x7, 0x3f, 0x1000, 0x2, 0x3}, 0x14) r6 = openat$vcsa(0xffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x40100, 0x0) write$cgroup_subtree(r6, &(0x7f0000000640)={[{0x2b, 'io'}, {0x2d, 'memory'}]}, 0xc) ioctl$VIDIOC_S_FBUF(r6, 0x402c560b, &(0x7f00000006c0)={0x18, 0x8, &(0x7f0000000680), {0xffff8001, 0x3f, 0x41416770, 0x1, 0x4d16, 0x5, 0x6, 0x80}}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000700)={0x1ff, 0x6, {r4}, {0xffffffffffffffff}, 0x2, 0x8001}) ptrace$peeksig(0x4209, r7, &(0x7f0000000740)={0x1, 0x0, 0x5}, &(0x7f0000000780)=[{}, {}, {}, {}, {}]) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f0000000a00)) r8 = openat$null(0xffffff9c, &(0x7f0000000a40)='/dev/null\x00', 0x10000, 0x0) ioctl$CHAR_RAW_PBSZGET(r8, 0x127b, &(0x7f0000000a80)) [ 349.268600][ T8662] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 349.277298][ T8662] usb 1-1: config 0 has no interface number 0 [ 349.283556][ T8662] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 349.294162][ T8662] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 349.303874][ T8662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.408424][ T8662] usb 1-1: config 0 descriptor?? [ 349.432044][ T8729] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 349.468663][ T8662] hub 1-1:0.253: bad descriptor, ignoring hub [ 349.474991][ T8662] hub: probe of 1-1:0.253 failed with error -5 [ 349.489486][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input6 [ 349.857966][ T5] Bluetooth: hci0: command 0x0419 tx timeout [ 351.151292][ T8767] IPVS: ftp: loaded support on port[0] = 21 [ 351.749931][ T8767] chnl_net:caif_netlink_parms(): no params data found [ 351.921410][ T8767] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.928860][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.938156][ T8767] device bridge_slave_0 entered promiscuous mode [ 351.981012][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.989102][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.998801][ T8767] device bridge_slave_1 entered promiscuous mode [ 352.061122][ T8767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.081134][ T8767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.146995][ T8767] team0: Port device team_slave_0 added [ 352.163756][ T8767] team0: Port device team_slave_1 added [ 352.213749][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.221096][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.248105][ T8767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.271189][ T8767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.279160][ T8767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.305339][ T8767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.381458][ T8767] device hsr_slave_0 entered promiscuous mode [ 352.391329][ T8767] device hsr_slave_1 entered promiscuous mode [ 352.404580][ T8767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.413332][ T8767] Cannot create hsr debugfs directory [ 352.751485][ T8767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.771923][ T8767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.792572][ T8767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.830220][ T8767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.057674][ T8711] Bluetooth: hci1: command 0x0409 tx timeout [ 353.203968][ T8767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.245884][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.255009][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.272743][ T8767] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.310096][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.320065][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.329433][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.336732][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.358710][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.368252][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.378114][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.387471][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.394686][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.417919][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.448285][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.470348][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 353.480149][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.516842][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.528015][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.538480][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.549973][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.559669][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.588686][ T8767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.602521][ T8767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.631518][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.641234][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.679214][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.687065][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.723736][ T8767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.795070][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.805678][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.871836][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.882623][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.904342][ T8767] device veth0_vlan entered promiscuous mode [ 353.914253][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.923829][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.957547][ T8767] device veth1_vlan entered promiscuous mode [ 354.041765][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 354.052650][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 354.062175][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.075092][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.098098][ T8767] device veth0_macvtap entered promiscuous mode [ 354.118716][ T8767] device veth1_macvtap entered promiscuous mode [ 354.129211][ T8662] usb 1-1: USB disconnect, device number 3 10:14:20 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') [ 354.244158][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 354.255307][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.269161][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.296496][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 354.305926][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 354.315958][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.327946][ T3223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.397187][ T8767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 354.408417][ T8767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.422709][ T8767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.442895][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.452959][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 355.006699][ T3774] usb 1-1: new high-speed USB device number 4 using dummy_hcd 10:14:21 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') [ 355.146851][ T5] Bluetooth: hci1: command 0x041b tx timeout [ 355.388996][ T3774] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 355.397515][ T3774] usb 1-1: config 0 has no interface number 0 [ 355.403775][ T3774] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 355.414267][ T3774] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 355.423468][ T3774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.545441][ T3774] usb 1-1: config 0 descriptor?? [ 355.569110][ T8998] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 355.598679][ T3774] hub 1-1:0.253: bad descriptor, ignoring hub [ 355.605007][ T3774] hub: probe of 1-1:0.253 failed with error -5 [ 355.618590][ T3774] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input7 [ 355.817888][ T8713] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 355.969220][ T8997] usb 1-1: USB disconnect, device number 4 [ 356.183081][ T8713] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 356.191616][ T8713] usb 2-1: config 0 has no interface number 0 [ 356.198158][ T8713] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 356.208583][ T8713] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 356.218070][ T8713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.237643][ T8713] usb 2-1: config 0 descriptor?? [ 356.264928][ T9008] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 356.320005][ T8713] hub 2-1:0.253: bad descriptor, ignoring hub [ 356.326577][ T8713] hub: probe of 2-1:0.253 failed with error -5 [ 356.340028][ T8713] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input8 10:14:22 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') [ 356.711686][ T8713] usb 2-1: USB disconnect, device number 2 [ 357.216735][ T8997] Bluetooth: hci1: command 0x040f tx timeout [ 357.227849][ T8713] usb 1-1: new high-speed USB device number 5 using dummy_hcd 10:14:23 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') [ 357.588888][ T8713] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 357.597509][ T8713] usb 1-1: config 0 has no interface number 0 [ 357.603793][ T8713] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 357.614332][ T8713] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 357.624148][ T8713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.689238][ T8713] usb 1-1: config 0 descriptor?? [ 357.707954][ T9048] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 357.728104][ T8713] hub 1-1:0.253: bad descriptor, ignoring hub [ 357.734414][ T8713] hub: probe of 1-1:0.253 failed with error -5 [ 357.748095][ T8713] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input9 [ 357.837375][ T8662] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 358.111731][ T3774] usb 1-1: USB disconnect, device number 5 [ 358.202268][ T8662] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 358.211179][ T8662] usb 2-1: config 0 has no interface number 0 [ 358.217681][ T8662] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 358.228212][ T8662] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 358.237594][ T8662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.275770][ T8662] usb 2-1: config 0 descriptor?? [ 358.298470][ T9053] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 358.320592][ T8662] hub 2-1:0.253: bad descriptor, ignoring hub [ 358.327743][ T8662] hub: probe of 2-1:0.253 failed with error -5 [ 358.393437][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input10 [ 358.701030][ T8662] usb 2-1: USB disconnect, device number 3 10:14:24 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') 10:14:25 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') [ 359.257233][ T8712] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 359.297316][ T3774] Bluetooth: hci1: command 0x0419 tx timeout [ 359.619647][ T8712] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 359.628081][ T8712] usb 1-1: config 0 has no interface number 0 [ 359.634345][ T8712] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 359.644781][ T8712] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 359.654062][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.747369][ T8712] usb 1-1: config 0 descriptor?? [ 359.767508][ T9092] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 359.788180][ T8712] hub 1-1:0.253: bad descriptor, ignoring hub [ 359.797341][ T8712] hub: probe of 1-1:0.253 failed with error -5 [ 359.813317][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input11 [ 359.828500][ T8662] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 360.141031][ T8713] usb 1-1: USB disconnect, device number 6 [ 360.207484][ T8662] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 360.216240][ T8662] usb 2-1: config 0 has no interface number 0 [ 360.222531][ T8662] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 360.233309][ T8662] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 360.242882][ T8662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.329667][ T8662] usb 2-1: config 0 descriptor?? [ 360.347409][ T9097] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 360.368831][ T8662] hub 2-1:0.253: bad descriptor, ignoring hub [ 360.375399][ T8662] hub: probe of 2-1:0.253 failed with error -5 [ 360.388946][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input12 [ 360.747115][ T3774] usb 2-1: USB disconnect, device number 4 10:14:26 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:27 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 361.356218][ T8662] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 361.716857][ T8662] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 361.725509][ T8662] usb 1-1: config 0 has no interface number 0 [ 361.732018][ T8662] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 361.742393][ T8662] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 361.751732][ T8662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.767235][ T8997] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 361.808316][ T8662] usb 1-1: config 0 descriptor?? [ 361.829103][ T9139] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 361.848986][ T8662] hub 1-1:0.253: bad descriptor, ignoring hub [ 361.855309][ T8662] hub: probe of 1-1:0.253 failed with error -5 [ 361.869427][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input13 [ 362.148038][ T8997] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 362.156491][ T8997] usb 2-1: config 0 has no interface number 0 [ 362.162759][ T8997] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 362.173228][ T8997] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 362.182591][ T8997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.256515][ T8662] usb 1-1: Failed to suspend device, error -71 [ 362.340656][ T5] usb 1-1: USB disconnect, device number 7 [ 362.349875][ T8997] usb 2-1: config 0 descriptor?? [ 362.369130][ T9143] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 362.409829][ T8997] hub 2-1:0.253: bad descriptor, ignoring hub [ 362.416607][ T8997] hub: probe of 2-1:0.253 failed with error -5 [ 362.429913][ T8997] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input14 [ 362.727255][ T8662] usb 2-1: USB disconnect, device number 5 10:14:28 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:29 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:29 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 363.437602][ T5] usb 1-1: new high-speed USB device number 8 using dummy_hcd 10:14:29 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 363.806529][ T5] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 363.814962][ T5] usb 1-1: config 0 has no interface number 0 [ 363.821469][ T5] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 363.831916][ T5] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 363.841203][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.973913][ T5] usb 1-1: config 0 descriptor?? [ 363.997362][ T9183] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 364.024105][ T5] hub 1-1:0.253: bad descriptor, ignoring hub [ 364.030631][ T5] hub: probe of 1-1:0.253 failed with error -5 [ 364.044240][ T5] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input15 10:14:30 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 364.335397][ T8713] usb 1-1: USB disconnect, device number 8 10:14:30 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:30 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) 10:14:31 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 365.451070][ T9197] IPVS: ftp: loaded support on port[0] = 21 [ 365.526882][ T8712] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 365.963174][ T8712] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 365.971605][ T8712] usb 1-1: config 0 has no interface number 0 [ 365.978285][ T8712] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 365.988639][ T8712] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 365.997933][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.100112][ T8712] usb 1-1: config 0 descriptor?? [ 366.128364][ T9223] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 366.184664][ T8712] hub 1-1:0.253: bad descriptor, ignoring hub [ 366.191201][ T8712] hub: probe of 1-1:0.253 failed with error -5 [ 366.205906][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input16 10:14:32 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 366.490873][ T9197] chnl_net:caif_netlink_parms(): no params data found [ 366.510447][ T8712] usb 1-1: USB disconnect, device number 9 [ 366.879897][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.887283][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.897016][ T9197] device bridge_slave_0 entered promiscuous mode [ 366.917975][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.925301][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.935479][ T9197] device bridge_slave_1 entered promiscuous mode 10:14:33 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) [ 367.072496][ T9197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.117873][ T9197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.249960][ T9197] team0: Port device team_slave_0 added [ 367.277923][ T9197] team0: Port device team_slave_1 added [ 367.296470][ T8662] Bluetooth: hci2: command 0x0409 tx timeout [ 367.359188][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.366330][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.392457][ T9197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 10:14:33 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 367.417115][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.424183][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.451056][ T9197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.545016][ T9197] device hsr_slave_0 entered promiscuous mode [ 367.560905][ T9197] device hsr_slave_1 entered promiscuous mode [ 367.588911][ T9197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.596629][ T9197] Cannot create hsr debugfs directory [ 367.616923][ T8997] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 368.037289][ T8997] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 368.046062][ T8997] usb 1-1: config 0 has no interface number 0 [ 368.052317][ T8997] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 368.062793][ T8997] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 368.072000][ T8997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.123577][ T9197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 368.156360][ T3774] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 368.200248][ T9197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 368.227565][ T8997] usb 1-1: config 0 descriptor?? [ 368.247917][ T9405] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 368.269893][ T8997] hub 1-1:0.253: bad descriptor, ignoring hub [ 368.271477][ T9197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 368.276550][ T8997] hub: probe of 1-1:0.253 failed with error -5 [ 368.296666][ T8997] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input17 [ 368.358526][ T9197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 368.477937][ T3774] usb 2-1: device descriptor read/64, error 18 [ 368.659682][ T8711] usb 1-1: USB disconnect, device number 10 [ 368.887148][ T3774] usb 2-1: device descriptor read/64, error 18 [ 368.982717][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0 10:14:35 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) [ 369.121092][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.130215][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.164260][ T9197] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.179297][ T3774] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 369.207868][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.218729][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.228240][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.235533][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.301510][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 369.311033][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.320825][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.330426][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.337914][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.347020][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 369.357923][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 369.376404][ T8662] Bluetooth: hci2: command 0x041b tx timeout [ 369.448678][ T9197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.459750][ T9197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.509924][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.520434][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.531110][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.541449][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.551710][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.561186][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.571478][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.580949][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.597423][ T3774] usb 2-1: device descriptor read/64, error 18 [ 369.623250][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.633122][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.685826][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.693573][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.751036][ T9197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.832398][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.842916][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.916029][ T8712] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 369.933864][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 369.944482][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.980290][ T9197] device veth0_vlan entered promiscuous mode [ 369.989070][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.998367][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.037170][ T3774] usb 2-1: device descriptor read/64, error 18 [ 370.052385][ T9197] device veth1_vlan entered promiscuous mode [ 370.138554][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 370.148542][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 370.158116][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.167998][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.186379][ T3774] usb usb2-port1: attempt power cycle [ 370.214898][ T9197] device veth0_macvtap entered promiscuous mode [ 370.231136][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.269468][ T9197] device veth1_macvtap entered promiscuous mode [ 370.281540][ T8712] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 370.290208][ T8712] usb 1-1: config 0 has no interface number 0 [ 370.297068][ T8712] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 370.307842][ T8712] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 370.317119][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.378215][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 370.389335][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.399495][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 370.410072][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.423981][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.433830][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.443773][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.459704][ T8712] usb 1-1: config 0 descriptor?? [ 370.476821][ T9487] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 370.502636][ T8712] hub 1-1:0.253: bad descriptor, ignoring hub [ 370.509056][ T8712] hub: probe of 1-1:0.253 failed with error -5 [ 370.522484][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input18 [ 370.541681][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 370.552342][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.562836][ T9197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 370.573410][ T9197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.587161][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.598298][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 370.608845][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.908705][ T8662] usb 1-1: USB disconnect, device number 11 [ 370.925391][ T3774] usb 2-1: new high-speed USB device number 8 using dummy_hcd 10:14:37 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 371.146735][ T3774] usb 2-1: device descriptor read/8, error -71 [ 371.366431][ T3774] usb 2-1: device descriptor read/8, error -71 [ 371.455857][ T8712] Bluetooth: hci2: command 0x040f tx timeout [ 371.705248][ T8711] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 371.866391][ T3774] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 372.047471][ T3774] usb 2-1: device descriptor read/8, error -61 [ 372.075813][ T8711] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 372.084166][ T8711] usb 3-1: config 0 has no interface number 0 [ 372.090579][ T8711] usb 3-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 372.100948][ T8711] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 372.110275][ T8711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.130024][ T8711] usb 3-1: config 0 descriptor?? [ 372.160995][ T9516] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 372.197714][ T8711] hub 3-1:0.253: bad descriptor, ignoring hub [ 372.204042][ T8711] hub: probe of 3-1:0.253 failed with error -5 [ 372.242103][ T8711] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input19 [ 372.348146][ T3774] usb 2-1: device descriptor read/8, error -61 [ 372.465526][ T3774] usb usb2-port1: unable to enumerate USB device [ 372.596027][ T3774] usb 3-1: USB disconnect, device number 2 10:14:39 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:39 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:39 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 373.538271][ T8712] Bluetooth: hci2: command 0x0419 tx timeout [ 373.622127][ T8662] usb 3-1: new high-speed USB device number 3 using dummy_hcd 10:14:39 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 373.986032][ T8662] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 373.994379][ T8662] usb 3-1: config 0 has no interface number 0 [ 374.001043][ T8662] usb 3-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 374.011479][ T8662] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 374.020994][ T8662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:14:40 executing program 0: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 374.147283][ T8662] usb 3-1: config 0 descriptor?? [ 374.166789][ T9544] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 374.187463][ T8662] hub 3-1:0.253: bad descriptor, ignoring hub [ 374.193792][ T8662] hub: probe of 3-1:0.253 failed with error -5 [ 374.207938][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input20 10:14:40 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 374.500062][ T3223] usb 3-1: USB disconnect, device number 3 [ 374.925299][ T3774] usb 2-1: new high-speed USB device number 10 using dummy_hcd 10:14:41 executing program 0: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:41 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 375.205572][ T3774] usb 2-1: device descriptor read/64, error 18 [ 375.607398][ T3774] usb 2-1: device descriptor read/64, error 18 [ 375.805791][ T8711] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 375.896213][ T3774] usb 2-1: new high-speed USB device number 11 using dummy_hcd 10:14:42 executing program 0: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 376.176216][ T3774] usb 2-1: device descriptor read/64, error 18 [ 376.206320][ T8711] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 376.214762][ T8711] usb 3-1: config 0 has no interface number 0 [ 376.222168][ T8711] usb 3-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 376.232595][ T8711] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 376.241914][ T8711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.359471][ T8711] usb 3-1: config 0 descriptor?? [ 376.377304][ T9585] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 376.397288][ T8711] hub 3-1:0.253: bad descriptor, ignoring hub [ 376.403610][ T8711] hub: probe of 3-1:0.253 failed with error -5 [ 376.417693][ T8711] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input21 [ 376.607279][ T3774] usb 2-1: device descriptor read/64, error 18 [ 376.742149][ T3774] usb usb2-port1: attempt power cycle 10:14:42 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 376.808192][ T8662] usb 3-1: USB disconnect, device number 4 [ 376.809311][ T5] usb 3-1: Failed to suspend device, error -19 [ 377.326697][ T8712] usb 1-1: new high-speed USB device number 12 using dummy_hcd 10:14:43 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) [ 377.485763][ T3774] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 377.595783][ T8712] usb 1-1: device descriptor read/64, error 18 10:14:43 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 377.697305][ T3774] usb 2-1: device descriptor read/8, error -71 [ 377.906571][ T3774] usb 2-1: device descriptor read/8, error -71 [ 377.936111][ T8662] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 377.987980][ T8712] usb 1-1: device descriptor read/64, error 18 [ 378.256584][ T8712] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 378.298089][ T8662] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 378.306927][ T8662] usb 3-1: config 0 has no interface number 0 [ 378.313201][ T8662] usb 3-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 378.323674][ T8662] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 378.333106][ T8662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.367598][ T8662] usb 3-1: config 0 descriptor?? [ 378.387482][ T9616] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 378.395170][ T3774] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 378.407622][ T8662] hub 3-1:0.253: bad descriptor, ignoring hub [ 378.413927][ T8662] hub: probe of 3-1:0.253 failed with error -5 [ 378.427957][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input22 [ 378.585719][ T8712] usb 1-1: device descriptor read/64, error 18 [ 378.618822][ T3774] usb 2-1: device descriptor read/8, error -61 [ 378.768068][ T5] usb 3-1: USB disconnect, device number 5 [ 378.898363][ T3774] usb 2-1: device descriptor read/8, error -61 [ 378.976229][ T8712] usb 1-1: device descriptor read/64, error 18 [ 379.018667][ T3774] usb usb2-port1: unable to enumerate USB device [ 379.095339][ T8712] usb usb1-port1: attempt power cycle 10:14:45 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) [ 379.625019][ T8662] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 379.805053][ T8712] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 379.975822][ T8712] usb 1-1: device descriptor read/8, error -61 [ 379.989240][ T8662] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 379.997769][ T8662] usb 3-1: config 0 has no interface number 0 [ 380.005248][ T8662] usb 3-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 380.015736][ T8662] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 380.025191][ T8662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:14:46 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 380.132305][ T8662] usb 3-1: config 0 descriptor?? [ 380.156112][ T9643] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 380.186063][ T8662] hub 3-1:0.253: bad descriptor, ignoring hub [ 380.192390][ T8662] hub: probe of 3-1:0.253 failed with error -5 [ 380.205814][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input23 [ 380.245466][ T8712] usb 1-1: device descriptor read/8, error -71 [ 380.498817][ T5] usb 3-1: USB disconnect, device number 6 [ 380.816068][ T8712] usb 1-1: new high-speed USB device number 15 using dummy_hcd 10:14:46 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:46 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) [ 381.007637][ T8712] usb 1-1: device descriptor read/8, error -61 [ 381.276202][ T8712] usb 1-1: device descriptor read/8, error -61 [ 381.395605][ T8712] usb usb1-port1: unable to enumerate USB device [ 381.446610][ T9113] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 381.507174][ T8662] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 381.714923][ T9113] usb 2-1: device descriptor read/64, error 18 [ 381.875259][ T8662] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 381.883943][ T8662] usb 3-1: config 0 has no interface number 0 [ 381.890432][ T8662] usb 3-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 381.900796][ T8662] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 381.910112][ T8662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.005510][ T8662] usb 3-1: config 0 descriptor?? [ 382.026500][ T9678] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 382.047163][ T8662] hub 3-1:0.253: bad descriptor, ignoring hub [ 382.053481][ T8662] hub: probe of 3-1:0.253 failed with error -5 [ 382.066954][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input24 10:14:48 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 382.146051][ T9113] usb 2-1: device descriptor read/64, error 18 [ 382.395368][ T8711] usb 3-1: USB disconnect, device number 7 [ 382.417090][ T9113] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 382.696929][ T9113] usb 2-1: device descriptor read/64, error 18 10:14:48 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:49 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 383.086618][ T9113] usb 2-1: device descriptor read/64, error 18 [ 383.205782][ T9113] usb usb2-port1: attempt power cycle 10:14:49 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:49 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:49 executing program 2: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 383.924792][ T9113] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 384.026649][ T9703] IPVS: ftp: loaded support on port[0] = 21 [ 384.086678][ T8713] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 384.095480][ T9113] usb 2-1: device descriptor read/8, error -61 10:14:50 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 384.364831][ T8713] usb 1-1: device descriptor read/64, error 18 [ 384.405976][ T9113] usb 2-1: device descriptor read/8, error -71 10:14:50 executing program 2: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 384.755106][ T8713] usb 1-1: device descriptor read/64, error 18 [ 384.898765][ T9703] chnl_net:caif_netlink_parms(): no params data found [ 384.983166][ T9113] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 385.025868][ T8713] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 385.103286][ T9703] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.110856][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.121552][ T9703] device bridge_slave_0 entered promiscuous mode [ 385.140398][ T9703] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.148723][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.158572][ T9703] device bridge_slave_1 entered promiscuous mode [ 385.201362][ T9113] usb 2-1: device descriptor read/8, error -61 [ 385.220783][ T9703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.278143][ T9703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.356914][ T8713] usb 1-1: device descriptor read/64, error 18 [ 385.413273][ T9703] team0: Port device team_slave_0 added [ 385.447618][ T9703] team0: Port device team_slave_1 added 10:14:51 executing program 2: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 385.495133][ T9113] usb 2-1: device descriptor read/8, error -61 [ 385.562554][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.569983][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.596600][ T9703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.625361][ T9113] usb usb2-port1: unable to enumerate USB device [ 385.726737][ T9703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.733819][ T9703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.760447][ T9703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.794901][ T8713] usb 1-1: device descriptor read/64, error 18 [ 385.916983][ T8713] usb usb1-port1: attempt power cycle [ 385.935177][ T8711] Bluetooth: hci3: command 0x0409 tx timeout [ 386.126661][ T9703] device hsr_slave_0 entered promiscuous mode [ 386.206101][ T9703] device hsr_slave_1 entered promiscuous mode [ 386.253453][ T9703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.262556][ T9703] Cannot create hsr debugfs directory 10:14:52 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 386.655672][ T8713] usb 1-1: new high-speed USB device number 18 using dummy_hcd 10:14:52 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 386.798782][ T9703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 386.832391][ T9703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.893418][ T9703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.948131][ T8713] usb 1-1: device descriptor read/8, error -71 [ 386.956603][ T9703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 386.985459][ T5] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 387.164936][ T8713] usb 1-1: device descriptor read/8, error -71 [ 387.316485][ T5] usb 3-1: device descriptor read/64, error 18 [ 387.657679][ T8713] usb 1-1: new high-speed USB device number 19 using dummy_hcd 10:14:53 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 387.724836][ T5] usb 3-1: device descriptor read/64, error 18 [ 387.786513][ T9703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.835153][ T8713] usb 1-1: device descriptor read/8, error -61 [ 387.873042][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.882397][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.917562][ T9703] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.984260][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.995397][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.005226][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.012509][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.015079][ T8662] Bluetooth: hci3: command 0x041b tx timeout [ 388.024394][ T5] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 388.126167][ T8713] usb 1-1: device descriptor read/8, error -61 [ 388.151205][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.160507][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.170467][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.186449][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.193744][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.203011][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.214472][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.250152][ T8713] usb usb1-port1: unable to enumerate USB device [ 388.294492][ T5] usb 3-1: device descriptor read/64, error 18 [ 388.321731][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.332671][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.365187][ T8662] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 388.420711][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.430877][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.441301][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.451642][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.461204][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.523092][ T9703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.536630][ T9703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.564032][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.573841][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.677200][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.686659][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.725083][ T8662] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.726861][ T9703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.735562][ T8662] usb 2-1: config 0 has no interfaces? [ 388.735724][ T8662] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 388.735850][ T8662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.767924][ T5] usb 3-1: device descriptor read/64, error 18 [ 388.780003][ T8662] usb 2-1: config 0 descriptor?? [ 388.909987][ T5] usb usb3-port1: attempt power cycle [ 388.975767][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.985941][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 389.042737][ T8662] usb 2-1: USB disconnect, device number 18 [ 389.096367][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.106002][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.148992][ T9703] device veth0_vlan entered promiscuous mode [ 389.168056][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.177220][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.221534][ T9703] device veth1_vlan entered promiscuous mode [ 389.325780][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.335196][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.344994][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.354776][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.383988][ T9703] device veth0_macvtap entered promiscuous mode [ 389.407726][ T9703] device veth1_macvtap entered promiscuous mode [ 389.490279][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.500939][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.511409][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.521955][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.532899][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 389.543425][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.557394][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.568583][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 389.578497][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.587895][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.597942][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.686382][ T5] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 389.761645][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.772387][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.783277][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.793885][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.804200][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 389.814747][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.828745][ T9703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.843920][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.854125][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.895326][ T5] usb 3-1: device descriptor read/8, error -71 [ 390.094308][ T9113] Bluetooth: hci3: command 0x040f tx timeout [ 390.122320][ T5] usb 3-1: device descriptor read/8, error -71 [ 390.975616][ T8662] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 391.335686][ T8662] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 391.344106][ T8662] usb 4-1: config 0 has no interface number 0 [ 391.350364][ T8662] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 391.360850][ T8662] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 391.370167][ T8662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.452644][ T8662] usb 4-1: config 0 descriptor?? [ 391.479606][ T9984] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 391.496776][ T8662] hub 4-1:0.253: bad descriptor, ignoring hub [ 391.503086][ T8662] hub: probe of 4-1:0.253 failed with error -5 [ 391.516662][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input25 [ 391.905173][ T8713] usb 4-1: USB disconnect, device number 2 [ 392.174399][ T9113] Bluetooth: hci3: command 0x0419 tx timeout 10:14:58 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:58 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:58 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:14:58 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 392.854269][ T8711] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 392.875012][ T5] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 392.897501][ T8713] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 393.119415][ T8662] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 393.155093][ T5] usb 3-1: device descriptor read/64, error 18 [ 393.167532][ T8711] usb 1-1: device descriptor read/64, error 18 [ 393.265134][ T8713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.275627][ T8713] usb 2-1: config 0 has no interfaces? [ 393.281287][ T8713] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 393.290691][ T8713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.316940][ T8713] usb 2-1: config 0 descriptor?? [ 393.485497][ T8662] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 393.494819][ T8662] usb 4-1: config 0 has no interface number 0 [ 393.501031][ T8662] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 393.511610][ T8662] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 393.521102][ T8662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.559218][ T8713] usb 2-1: USB disconnect, device number 19 [ 393.574897][ T5] usb 3-1: device descriptor read/64, error 18 [ 393.584893][ T8711] usb 1-1: device descriptor read/64, error 18 [ 393.596189][ T8662] usb 4-1: config 0 descriptor?? [ 393.616893][T10017] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 393.637017][ T8662] hub 4-1:0.253: bad descriptor, ignoring hub [ 393.643389][ T8662] hub: probe of 4-1:0.253 failed with error -5 [ 393.656706][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input26 [ 393.864301][ T8711] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 393.872308][ T5] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 394.035588][ T9113] usb 4-1: USB disconnect, device number 3 10:15:00 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 394.154237][ T8711] usb 1-1: device descriptor read/64, error 18 [ 394.160746][ T5] usb 3-1: device descriptor read/64, error 18 [ 394.605796][ T8711] usb 1-1: device descriptor read/64, error 18 [ 394.612213][ T5] usb 3-1: device descriptor read/64, error 18 [ 394.685346][ T9502] usb 2-1: new high-speed USB device number 20 using dummy_hcd 10:15:00 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 394.725663][ T8711] usb usb1-port1: attempt power cycle [ 394.735594][ T5] usb usb3-port1: attempt power cycle [ 395.077515][ T9502] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.088083][ T9502] usb 2-1: config 0 has no interfaces? [ 395.093746][ T9502] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 395.103369][ T9502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.170598][ T9502] usb 2-1: config 0 descriptor?? [ 395.225051][ T3774] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 395.421442][ T9113] usb 2-1: USB disconnect, device number 20 [ 395.484319][ T8711] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 395.492270][ T5] usb 3-1: new high-speed USB device number 14 using dummy_hcd 10:15:01 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:01 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 395.638941][ T3774] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 395.647812][ T3774] usb 4-1: config 0 has no interface number 0 [ 395.654679][ T3774] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 395.665101][ T3774] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 395.674381][ T3774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.704985][ T5] usb 3-1: device descriptor read/8, error -71 [ 395.725808][ T8711] usb 1-1: device descriptor read/8, error -71 [ 395.802362][ T3774] usb 4-1: config 0 descriptor?? [ 395.827540][T10053] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 395.877172][ T3774] hub 4-1:0.253: bad descriptor, ignoring hub [ 395.883529][ T3774] hub: probe of 4-1:0.253 failed with error -5 [ 395.934834][ T5] usb 3-1: device descriptor read/8, error -71 [ 395.950285][ T3774] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input27 [ 395.962780][ T8711] usb 1-1: device descriptor read/8, error -71 10:15:02 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 396.236529][ T9502] usb 4-1: USB disconnect, device number 4 [ 396.256281][ T8662] usb 4-1: Failed to suspend device, error -71 [ 396.435318][ T5] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 396.454745][ T8711] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 396.554918][ T8662] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 396.627332][ T5] usb 3-1: device descriptor read/8, error -61 [ 396.648293][ T8711] usb 1-1: device descriptor read/8, error -61 [ 396.917605][ T5] usb 3-1: device descriptor read/8, error -61 [ 396.925101][ T8662] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 396.933444][ T8662] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.943910][ T8662] usb 2-1: config 0 has no interface number 0 [ 396.950209][ T8662] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 396.956806][ T8711] usb 1-1: device descriptor read/8, error -61 10:15:02 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 396.959529][ T8662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.058446][ T5] usb usb3-port1: unable to enumerate USB device [ 397.084277][ T8711] usb usb1-port1: unable to enumerate USB device [ 397.256886][ T8662] usb 2-1: config 0 descriptor?? [ 397.298066][ T8662] hub 2-1:0.253: bad descriptor, ignoring hub [ 397.304472][ T8662] hub: probe of 2-1:0.253 failed with error -5 10:15:03 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 397.624691][ T8711] usb 2-1: USB disconnect, device number 21 10:15:03 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:04 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:04 executing program 3: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 398.694045][ T8713] usb 2-1: new high-speed USB device number 22 using dummy_hcd 10:15:05 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 399.124528][ T8713] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 399.132880][ T8713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.143421][ T8713] usb 2-1: config 0 has no interface number 0 [ 399.149904][ T8713] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 399.159247][ T8713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:05 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:05 executing program 3: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 399.317182][ T8713] usb 2-1: config 0 descriptor?? [ 399.356071][ T8713] hub 2-1:0.253: bad descriptor, ignoring hub [ 399.362392][ T8713] hub: probe of 2-1:0.253 failed with error -5 [ 399.676988][ T9113] usb 2-1: USB disconnect, device number 22 [ 399.804062][ T8713] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 399.844846][ T8662] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 400.114099][ T8662] usb 3-1: device descriptor read/64, error 18 10:15:06 executing program 3: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:06 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 400.186530][ T8713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.197166][ T8713] usb 1-1: config 0 has no interfaces? [ 400.202873][ T8713] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 400.212231][ T8713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.296359][ T8713] usb 1-1: config 0 descriptor?? [ 400.504055][ T8662] usb 3-1: device descriptor read/64, error 18 [ 400.544258][ T9113] usb 1-1: USB disconnect, device number 24 [ 400.777151][ T8662] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 400.834679][ T3774] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 401.054010][ T8662] usb 3-1: device descriptor read/64, error 18 [ 401.196665][ T3774] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 401.205121][ T3774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.216457][ T3774] usb 2-1: config 0 has no interface number 0 [ 401.222749][ T3774] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 401.232052][ T3774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:07 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:07 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 401.445359][ T8662] usb 3-1: device descriptor read/64, error 18 [ 401.537628][ T3774] usb 2-1: config 0 descriptor?? [ 401.568706][ T8662] usb usb3-port1: attempt power cycle [ 401.585885][ T3774] hub 2-1:0.253: bad descriptor, ignoring hub [ 401.592199][ T3774] hub: probe of 2-1:0.253 failed with error -5 [ 401.935122][ T8711] usb 2-1: USB disconnect, device number 23 [ 402.013950][ T3774] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 402.024180][ T8713] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 402.284595][ T8662] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 402.325973][ T3774] usb 4-1: device descriptor read/64, error 18 10:15:08 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 402.384335][ T8713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.394944][ T8713] usb 1-1: config 0 has no interfaces? [ 402.400545][ T8713] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 402.409902][ T8713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.476483][ T8662] usb 3-1: device descriptor read/8, error -61 [ 402.525759][ T8713] usb 1-1: config 0 descriptor?? 10:15:08 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 402.695886][ T8662] usb 3-1: device descriptor read/8, error -71 [ 402.725345][ T3774] usb 4-1: device descriptor read/64, error 18 [ 402.768851][ T9113] usb 1-1: USB disconnect, device number 25 [ 402.908885][ T0] NOHZ: local_softirq_pending 08 10:15:08 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 402.993916][ T3774] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 403.024329][ T5] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 403.186828][ T8662] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 403.284474][ T3774] usb 4-1: device descriptor read/64, error 18 [ 403.366407][ T8662] usb 3-1: device descriptor read/8, error -61 [ 403.394704][ T5] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 403.403120][ T5] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.413678][ T5] usb 2-1: config 0 has no interface number 0 [ 403.420039][ T5] usb 2-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.433783][ T5] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 403.443047][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:09 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 403.634939][ T8662] usb 3-1: device descriptor read/8, error -61 [ 403.747076][ T3774] usb 4-1: device descriptor read/64, error 18 [ 403.754163][ T8662] usb usb3-port1: unable to enumerate USB device [ 403.805105][ T5] usb 2-1: config 0 descriptor?? [ 403.845813][ T5] hub 2-1:0.253: bad descriptor, ignoring hub [ 403.852281][ T5] hub: probe of 2-1:0.253 failed with error -5 [ 403.883894][ T3774] usb usb4-port1: attempt power cycle [ 404.185166][ T5] usb 2-1: USB disconnect, device number 24 [ 404.223632][ T9113] usb 1-1: new high-speed USB device number 26 using dummy_hcd 10:15:10 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 404.604867][ T3774] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 404.605917][ T9113] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.623377][ T9113] usb 1-1: config 0 has no interfaces? [ 404.628984][ T9113] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 404.638239][ T9113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:10 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 404.734030][ T9113] usb 1-1: config 0 descriptor?? [ 404.776064][ T3774] usb 4-1: device descriptor read/8, error -71 [ 404.980214][ T8662] usb 1-1: USB disconnect, device number 26 [ 405.004047][ T3774] usb 4-1: device descriptor read/8, error -71 [ 405.213969][ T8713] usb 2-1: new high-speed USB device number 25 using dummy_hcd 10:15:11 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 405.514709][ T3774] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 405.584176][ T8713] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 405.592697][ T8713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.603141][ T8713] usb 2-1: config 0 has no interface number 0 [ 405.609480][ T8713] usb 2-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.623618][ T8713] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 405.632813][ T8713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.717949][T10209] IPVS: ftp: loaded support on port[0] = 21 [ 405.755942][ T3774] usb 4-1: device descriptor read/8, error -61 [ 405.807653][ T8713] usb 2-1: config 0 descriptor?? [ 405.845431][ T8713] hub 2-1:0.253: bad descriptor, ignoring hub [ 405.851755][ T8713] hub: probe of 2-1:0.253 failed with error -5 10:15:12 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 406.023986][ T3774] usb 4-1: device descriptor read/8, error -61 [ 406.144818][ T3774] usb usb4-port1: unable to enumerate USB device [ 406.194180][ T8713] usb 2-1: USB disconnect, device number 25 [ 406.453524][ T9113] usb 1-1: new high-speed USB device number 27 using dummy_hcd 10:15:12 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 406.734898][T10209] chnl_net:caif_netlink_parms(): no params data found [ 406.765338][ T3774] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 406.824726][ T9113] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 406.833804][ T9113] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.844212][ T9113] usb 1-1: config 0 has no interface number 0 [ 406.850522][ T9113] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 406.859788][ T9113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.030150][ T9113] usb 1-1: config 0 descriptor?? [ 407.059016][ T3774] usb 3-1: device descriptor read/64, error 18 [ 407.076653][ T9113] hub 1-1:0.253: bad descriptor, ignoring hub [ 407.083001][ T9113] hub: probe of 1-1:0.253 failed with error -5 [ 407.272941][T10209] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.280656][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.289981][T10209] device bridge_slave_0 entered promiscuous mode [ 407.301998][ T9502] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 407.358613][T10209] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.366121][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.376686][T10209] device bridge_slave_1 entered promiscuous mode [ 407.432640][ T8662] usb 1-1: USB disconnect, device number 27 [ 407.488159][ T3774] usb 3-1: device descriptor read/64, error 18 [ 407.540181][ T8662] Bluetooth: hci4: command 0x0409 tx timeout [ 407.544812][T10209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.611233][T10209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.733622][ T9502] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 407.742006][ T9502] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.752657][ T9502] usb 2-1: config 0 has no interface number 0 [ 407.759166][ T9502] usb 2-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.772554][ T9502] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 407.781947][ T9502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.793251][ C1] hrtimer: interrupt took 234361 ns [ 407.803640][ T3774] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 407.959667][T10209] team0: Port device team_slave_0 added 10:15:14 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 408.077424][T10209] team0: Port device team_slave_1 added [ 408.093401][ T3774] usb 3-1: device descriptor read/64, error 18 10:15:14 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 408.225278][ T9502] usb 2-1: config 0 descriptor?? [ 408.272553][ T9502] hub 2-1:0.253: bad descriptor, ignoring hub [ 408.279097][ T9502] hub: probe of 2-1:0.253 failed with error -5 [ 408.357038][T10209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.364400][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.390600][T10209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.463124][T10209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.470637][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.497192][T10209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.593685][ T3774] usb 3-1: device descriptor read/64, error 18 [ 408.634060][ T9113] usb 2-1: USB disconnect, device number 26 [ 408.715751][ T3774] usb usb3-port1: attempt power cycle [ 408.729195][T10209] device hsr_slave_0 entered promiscuous mode [ 408.824140][ T9502] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 408.824760][T10209] device hsr_slave_1 entered promiscuous mode [ 408.844868][T10209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.844892][T10209] Cannot create hsr debugfs directory [ 408.948755][ T9113] usb 4-1: new high-speed USB device number 9 using dummy_hcd 10:15:15 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 409.205176][ T9502] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 409.213772][ T9502] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.224197][ T9502] usb 1-1: config 0 has no interface number 0 [ 409.231554][ T9502] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 409.240749][ T9502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.244526][ T9113] usb 4-1: device descriptor read/64, error 18 [ 409.388020][T10209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.423410][ T3774] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 409.479007][T10209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.512014][ T9502] usb 1-1: config 0 descriptor?? 10:15:15 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 409.555953][T10209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 409.559663][ T9502] hub 1-1:0.253: bad descriptor, ignoring hub [ 409.569150][ T9502] hub: probe of 1-1:0.253 failed with error -5 [ 409.617912][ T8662] Bluetooth: hci4: command 0x041b tx timeout [ 409.643678][ T9113] usb 4-1: device descriptor read/64, error 18 [ 409.646073][T10209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 409.658275][ T3774] usb 3-1: device descriptor read/8, error -71 [ 409.683724][ T8713] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 409.883835][ T3774] usb 3-1: device descriptor read/8, error -71 [ 409.884772][ T8662] usb 1-1: USB disconnect, device number 28 [ 409.913440][ T9113] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 410.045075][ T8713] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 410.053575][ T8713] usb 2-1: config 0 has no interface number 0 [ 410.059828][ T8713] usb 2-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.070540][ T8713] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 410.080024][ T8713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.184113][ T9113] usb 4-1: device descriptor read/64, error 18 [ 410.274002][ T8713] usb 2-1: config 0 descriptor?? [ 410.316200][ T8713] hub 2-1:0.253: bad descriptor, ignoring hub [ 410.322519][ T8713] hub: probe of 2-1:0.253 failed with error -5 [ 410.336158][ T8713] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input28 [ 410.383595][ T3774] usb 3-1: new high-speed USB device number 23 using dummy_hcd 10:15:16 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 410.540403][T10209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.596083][ T9113] usb 4-1: device descriptor read/64, error 18 [ 410.644074][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 410.653273][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.667474][ T3774] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.678423][ T3774] usb 3-1: config 0 has no interfaces? [ 410.684241][ T3774] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 410.693551][ T3774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.704884][ T8713] usb 2-1: USB disconnect, device number 27 [ 410.714233][ T9113] usb usb4-port1: attempt power cycle [ 410.757164][T10209] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.781239][ T3774] usb 3-1: config 0 descriptor?? [ 410.816210][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 410.826664][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 410.836415][ T9502] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.843712][ T9502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.920509][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 410.929788][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.939749][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.949151][ T9502] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.956444][ T9502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.966904][ T9502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 411.112114][T10209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.123365][T10209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.187438][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 411.198458][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 411.209158][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.220591][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 411.231126][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 411.242210][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 411.251893][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.262282][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 411.271805][ T3774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.307516][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 411.317386][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 411.332458][ T3774] usb 3-1: USB disconnect, device number 23 [ 411.423777][ T9113] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 411.542618][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.551211][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.594296][ T9113] usb 4-1: device descriptor read/8, error -61 [ 411.598076][ T9502] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 411.646595][T10209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.693255][ T8662] Bluetooth: hci4: command 0x040f tx timeout [ 411.803760][ T9113] usb 4-1: device descriptor read/8, error -71 [ 412.020284][ T9502] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 412.028707][ T9502] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.039292][ T9502] usb 1-1: config 0 has no interface number 0 [ 412.046200][ T9502] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 412.055407][ T9502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.205566][ T9502] usb 1-1: config 0 descriptor?? [ 412.245414][ T9502] hub 1-1:0.253: bad descriptor, ignoring hub [ 412.251720][ T9502] hub: probe of 1-1:0.253 failed with error -5 [ 412.564297][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 412.574480][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.605734][ T9502] usb 1-1: USB disconnect, device number 29 [ 412.711201][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.721151][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.753849][T10209] device veth0_vlan entered promiscuous mode [ 412.764918][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.774557][ T8662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.815032][T10209] device veth1_vlan entered promiscuous mode [ 413.055174][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 413.064999][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 413.074794][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 413.085325][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 413.159315][T10209] device veth0_macvtap entered promiscuous mode [ 413.250489][T10209] device veth1_macvtap entered promiscuous mode [ 413.496554][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 413.507677][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.517778][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 413.528350][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.538345][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 413.548903][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.558892][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 413.569446][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.583929][T10209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.623412][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 413.633812][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 413.643413][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 413.653634][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 413.779770][ T9113] Bluetooth: hci4: command 0x0419 tx timeout [ 413.810149][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 413.820870][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.831449][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 413.842045][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.852063][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 413.862650][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.875378][T10209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 413.885941][T10209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.900263][T10209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.919851][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.930531][ T9113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:15:20 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:20 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:20 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:20 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:20 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 414.986901][ T8713] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 415.025694][ T8662] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 415.045140][ T3774] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 415.064530][ T3223] usb 1-1: new high-speed USB device number 30 using dummy_hcd 10:15:21 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 415.323893][ T3774] usb 4-1: device descriptor read/64, error 18 [ 415.353875][ T8713] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 415.362991][ T8713] usb 2-1: config 0 has no interface number 0 [ 415.369250][ T8713] usb 2-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.380112][ T8713] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 415.389697][ T8713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.433991][ T8662] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.444765][ T8662] usb 3-1: config 0 has no interfaces? [ 415.450465][ T8662] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 415.460244][ T8662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.470394][ T3223] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 415.478947][ T3223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.489365][ T3223] usb 1-1: config 0 has no interface number 0 [ 415.495805][ T3223] usb 1-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.509073][ T3223] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 415.518322][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.587842][ T8662] usb 3-1: config 0 descriptor?? [ 415.609525][ T8713] usb 2-1: config 0 descriptor?? [ 415.657849][ T8713] hub 2-1:0.253: bad descriptor, ignoring hub [ 415.664278][ T8713] hub: probe of 2-1:0.253 failed with error -5 [ 415.686786][ T3223] usb 1-1: config 0 descriptor?? 10:15:21 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 415.720042][ T8713] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input29 [ 415.734674][ T3774] usb 4-1: device descriptor read/64, error 18 [ 415.735520][ T3223] hub 1-1:0.253: bad descriptor, ignoring hub [ 415.747247][ T3223] hub: probe of 1-1:0.253 failed with error -5 [ 415.979459][ T9502] usb 3-1: USB disconnect, device number 24 [ 416.013398][ T3774] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 416.154381][ T8713] usb 2-1: USB disconnect, device number 28 [ 416.303058][ T3774] usb 4-1: device descriptor read/64, error 18 [ 416.453067][ T3223] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 416.703010][ T3774] usb 4-1: device descriptor read/64, error 18 10:15:22 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 416.814105][ T3223] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 416.822457][ T3223] usb 5-1: config 0 has no interface number 0 [ 416.828940][ T3223] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.833863][ T3774] usb usb4-port1: attempt power cycle [ 416.839163][ T3223] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 416.853724][ T3223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:22 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 417.101560][ T3223] usb 5-1: config 0 descriptor?? [ 417.164613][ T3223] hub 5-1:0.253: bad descriptor, ignoring hub [ 417.171063][ T3223] hub: probe of 5-1:0.253 failed with error -5 [ 417.184635][ T3223] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input30 [ 417.483175][ T9502] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 417.573695][ T3223] usb 5-1: USB disconnect, device number 2 [ 417.615667][ T3774] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 417.672100][ T5] usb 1-1: USB disconnect, device number 30 10:15:23 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 417.834104][ T8713] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 417.854450][ T3774] usb 4-1: device descriptor read/8, error -71 [ 417.861088][ T9502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.871681][ T9502] usb 3-1: config 0 has no interfaces? [ 417.877640][ T9502] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 417.887052][ T9502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.972792][ T9502] usb 3-1: config 0 descriptor?? 10:15:24 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 418.063645][ T3774] usb 4-1: device descriptor read/8, error -71 10:15:24 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 418.193832][ T8713] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 418.202293][ T8713] usb 2-1: config 0 has no interface number 0 [ 418.208829][ T8713] usb 2-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.219051][ T8713] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 418.222187][ T9502] usb 3-1: USB disconnect, device number 25 [ 418.228344][ T8713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.391623][ T8713] usb 2-1: config 0 descriptor?? [ 418.447139][ T8713] hub 2-1:0.253: bad descriptor, ignoring hub [ 418.454265][ T8713] hub: probe of 2-1:0.253 failed with error -5 [ 418.467605][ T8713] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input31 [ 418.704308][ T8713] usb 2-1: USB disconnect, device number 29 10:15:24 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 418.855362][ T3774] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 418.914006][ T8712] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 418.942891][ T3223] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 419.034889][ T3774] usb 4-1: device descriptor read/8, error -61 [ 419.294332][ T8712] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 419.302921][ T8712] usb 5-1: config 0 has no interface number 0 [ 419.309185][ T8712] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.319473][ T8712] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 419.326007][ T3774] usb 4-1: device descriptor read/8, error -61 [ 419.328736][ T8712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.347342][ T3223] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 419.355926][ T3223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.366426][ T3223] usb 1-1: config 0 has no interface number 0 [ 419.373540][ T3223] usb 1-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.374214][ T8711] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 419.386781][ T3223] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 419.405839][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.466088][ T3774] usb usb4-port1: unable to enumerate USB device [ 419.507971][ T8712] usb 5-1: config 0 descriptor?? 10:15:25 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 419.555512][ T8712] hub 5-1:0.253: bad descriptor, ignoring hub [ 419.561828][ T8712] hub: probe of 5-1:0.253 failed with error -5 [ 419.575637][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input32 [ 419.641677][ T3223] usb 1-1: config 0 descriptor?? [ 419.684712][ T3223] hub 1-1:0.253: bad descriptor, ignoring hub [ 419.691042][ T3223] hub: probe of 1-1:0.253 failed with error -5 [ 419.875142][ T8711] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 419.883589][ T8711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.893978][ T8711] usb 3-1: config 0 has no interface number 0 [ 419.900284][ T8711] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 419.909620][ T8711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.958603][ T8711] usb 3-1: config 0 descriptor?? [ 420.015830][ T8711] hub 3-1:0.253: bad descriptor, ignoring hub [ 420.022254][ T8711] hub: probe of 3-1:0.253 failed with error -5 [ 420.263009][ T3223] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 420.633551][ T3223] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 420.641903][ T3223] usb 2-1: config 0 has no interface number 0 [ 420.648455][ T3223] usb 2-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.658656][ T3223] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 420.668861][ T3223] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 10:15:26 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 420.678168][ T3223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.063130][ T3223] usb 2-1: config 0 descriptor?? [ 421.122939][ T3223] hub 2-1:0.253: bad descriptor, ignoring hub [ 421.129254][ T3223] hub: probe of 2-1:0.253 failed with error -5 [ 421.143871][ T3223] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input33 10:15:27 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 421.504620][T10647] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 422.033013][ T8711] usb 4-1: new high-speed USB device number 17 using dummy_hcd 10:15:28 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 422.323146][ T8711] usb 4-1: device descriptor read/64, error 18 [ 422.329900][ T8997] usb 1-1: USB disconnect, device number 31 [ 422.366382][ T3223] usb 2-1: USB disconnect, device number 31 10:15:28 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 422.435849][ T28] usb 5-1: USB disconnect, device number 3 [ 422.637885][ T3223] usb 3-1: USB disconnect, device number 26 [ 422.734310][ T8711] usb 4-1: device descriptor read/64, error 18 10:15:29 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 423.003028][ T8711] usb 4-1: new high-speed USB device number 18 using dummy_hcd 10:15:29 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 423.284799][ T8711] usb 4-1: device descriptor read/64, error 18 [ 423.312971][ T8997] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 423.503854][ T28] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 423.682693][ T8711] usb 4-1: device descriptor read/64, error 18 [ 423.698581][ T8997] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 423.707073][ T8997] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.717479][ T8997] usb 1-1: config 0 has no interface number 0 [ 423.723808][ T8997] usb 1-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.737479][ T8997] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 423.746685][ T8997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.803475][ T8711] usb usb4-port1: attempt power cycle [ 423.824213][ T8712] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 423.863013][ T28] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 423.871360][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.881927][ T28] usb 3-1: config 0 has no interface number 0 [ 423.888417][ T28] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 423.897775][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.899415][ T8997] usb 1-1: config 0 descriptor?? [ 423.956801][ T28] usb 3-1: config 0 descriptor?? [ 423.974696][ T3223] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 423.976043][ T8997] hub 1-1:0.253: bad descriptor, ignoring hub [ 423.988581][ T8997] hub: probe of 1-1:0.253 failed with error -5 [ 423.995091][ T28] hub 3-1:0.253: bad descriptor, ignoring hub [ 424.001364][ T28] hub: probe of 3-1:0.253 failed with error -5 [ 424.253895][ T8712] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 424.262795][ T8712] usb 2-1: config 0 has no interface number 0 [ 424.269057][ T8712] usb 2-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.279344][ T8712] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 424.289977][ T8712] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 424.299388][ T8712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.321600][ T28] usb 1-1: USB disconnect, device number 32 [ 424.335507][ T9113] usb 3-1: USB disconnect, device number 27 [ 424.384107][ T3223] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 424.392703][ T3223] usb 5-1: config 0 has no interface number 0 [ 424.398952][ T3223] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.409236][ T3223] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 424.418703][ T3223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.513170][ T8711] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 424.832743][ T3223] usb 5-1: config 0 descriptor?? [ 424.847305][ T8712] usb 2-1: config 0 descriptor?? [ 424.881112][ T3223] hub 5-1:0.253: bad descriptor, ignoring hub [ 424.887605][ T3223] hub: probe of 5-1:0.253 failed with error -5 [ 424.901293][ T3223] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input34 [ 424.963232][ T8712] hub 2-1:0.253: bad descriptor, ignoring hub [ 424.969578][ T8712] hub: probe of 2-1:0.253 failed with error -5 [ 424.983572][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input35 10:15:31 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:31 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:31 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 425.083161][ T8711] usb 4-1: device descriptor read/8, error -71 [ 425.288351][ T8712] usb 2-1: USB disconnect, device number 32 [ 425.305611][ T8711] usb 4-1: device descriptor read/8, error -71 [ 425.344502][ T3223] usb 5-1: USB disconnect, device number 4 10:15:31 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:31 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 425.863571][ T9113] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 425.916812][ T9502] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 426.106246][ T8711] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 426.234278][ T9113] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 426.242829][ T9113] usb 1-1: config 0 has no interface number 0 [ 426.249133][ T9113] usb 1-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.259734][ T9113] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 426.269051][ T9113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.283924][ T9113] usb 1-1: config 0 descriptor?? [ 426.305739][ T9502] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 426.314576][ T9502] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.324919][ T9502] usb 3-1: config 0 has no interface number 0 [ 426.325954][ T9113] hub 1-1:0.253: bad descriptor, ignoring hub [ 426.331346][ T9502] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 426.337635][ T9113] hub: probe of 1-1:0.253 failed with error -5 [ 426.346617][ T9502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.365000][ T8711] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.368103][ T9113] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input36 [ 426.375331][ T8711] usb 4-1: config 0 has no interfaces? [ 426.391812][ T8711] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 426.401070][ T8711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.453600][ T8712] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 426.515086][ T9502] usb 3-1: config 0 descriptor?? [ 426.552381][ T8997] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 426.566197][ T9502] hub 3-1:0.253: bad descriptor, ignoring hub [ 426.576018][ T9502] hub: probe of 3-1:0.253 failed with error -5 [ 426.600729][ T8711] usb 4-1: config 0 descriptor?? [ 426.628526][ T9113] usb 1-1: USB disconnect, device number 33 [ 426.814912][ T8712] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 426.823595][ T8712] usb 5-1: config 0 has no interface number 0 [ 426.829862][ T8712] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.840131][ T8712] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 426.849538][ T8712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.852034][ T8711] usb 4-1: USB disconnect, device number 20 [ 426.914242][ T9502] usb 3-1: USB disconnect, device number 28 [ 426.953521][ T8997] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 426.962020][ T8997] usb 2-1: config 0 has no interface number 0 [ 426.968884][ T8997] usb 2-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.979109][ T8997] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 426.989311][ T8997] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 426.998616][ T8997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.006587][ T8712] usb 5-1: config 0 descriptor?? [ 427.045045][ T8712] hub 5-1:0.253: bad descriptor, ignoring hub [ 427.051368][ T8712] hub: probe of 5-1:0.253 failed with error -5 10:15:33 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 427.127716][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input37 [ 427.200160][ T8997] usb 2-1: config 0 descriptor?? [ 427.272248][ T8997] hub 2-1:0.253: bad descriptor, ignoring hub [ 427.278595][ T8997] hub: probe of 2-1:0.253 failed with error -5 [ 427.291984][ T8997] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input38 10:15:33 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 427.526413][ T8711] usb 5-1: USB disconnect, device number 5 10:15:33 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 427.862449][ T3223] usb 1-1: new high-speed USB device number 34 using dummy_hcd 10:15:34 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 428.152463][ T9113] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 428.223367][ T3223] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 428.231862][ T3223] usb 1-1: config 0 has no interface number 0 [ 428.238406][ T3223] usb 1-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.248623][ T3223] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 428.257959][ T3223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.272569][ T8712] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 428.433509][ T3223] usb 1-1: config 0 descriptor?? [ 428.454556][ T8997] usb 2-1: USB disconnect, device number 33 [ 428.474498][ T3223] hub 1-1:0.253: bad descriptor, ignoring hub [ 428.480804][ T3223] hub: probe of 1-1:0.253 failed with error -5 [ 428.497028][ T3223] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input39 [ 428.532482][ T8711] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 428.544103][ T9113] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 428.552696][ T9113] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.563341][ T9113] usb 3-1: config 0 has no interface number 0 [ 428.569593][ T9113] usb 3-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.582906][ T9113] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 428.592085][ T9113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.683112][ T8712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.693550][ T8712] usb 4-1: config 0 has no interfaces? [ 428.699236][ T8712] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 428.709033][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.799138][ T9113] usb 3-1: config 0 descriptor?? [ 428.829329][ T8712] usb 4-1: config 0 descriptor?? [ 428.847076][ T9113] hub 3-1:0.253: bad descriptor, ignoring hub [ 428.853920][ T9113] hub: probe of 3-1:0.253 failed with error -5 [ 428.895501][ T8713] usb 1-1: USB disconnect, device number 34 [ 428.933387][ T8711] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 428.941882][ T8711] usb 5-1: config 0 has no interface number 0 [ 428.948624][ T8711] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.958898][ T8711] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 428.968279][ T8711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:35 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) [ 429.081110][ T8712] usb 4-1: USB disconnect, device number 21 [ 429.165982][ T9113] usb 3-1: USB disconnect, device number 29 [ 429.177276][ T8711] usb 5-1: config 0 descriptor?? [ 429.227129][ T8711] hub 5-1:0.253: bad descriptor, ignoring hub [ 429.234417][ T8711] hub: probe of 5-1:0.253 failed with error -5 [ 429.247689][ T8711] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input40 10:15:35 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 429.664111][ T8713] usb 5-1: USB disconnect, device number 6 [ 429.733085][ T8711] usb 2-1: new high-speed USB device number 34 using dummy_hcd 10:15:35 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:35 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 430.096597][ T8711] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 430.105057][ T8711] usb 2-1: config 0 has no interface number 0 [ 430.111320][ T8711] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 430.122017][ T8711] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 430.131507][ T8711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:36 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 430.288445][ T8711] usb 2-1: config 0 descriptor?? [ 430.316282][T10910] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 430.333456][ T8997] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 430.343339][ T8713] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 430.365520][ T8711] hub 2-1:0.253: bad descriptor, ignoring hub [ 430.371828][ T8711] hub: probe of 2-1:0.253 failed with error -5 [ 430.385757][ T8711] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input41 [ 430.397796][ T3223] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 430.704910][ T8713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.715322][ T8713] usb 4-1: config 0 has no interfaces? [ 430.720988][ T8713] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 430.730516][ T8713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.745923][ T8997] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 430.754770][ T8997] usb 1-1: config 0 has no interface number 0 [ 430.761016][ T8997] usb 1-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.771252][ T8997] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 430.774355][ T3223] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 430.780460][ T8997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.788726][ T3223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.803024][ T8711] usb 2-1: USB disconnect, device number 34 [ 430.807098][ T3223] usb 3-1: config 0 has no interface number 0 [ 430.819380][ T3223] usb 3-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.832789][ T3223] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 430.841967][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.898244][ T8713] usb 4-1: config 0 descriptor?? [ 431.000962][ T8997] usb 1-1: config 0 descriptor?? [ 431.056781][ T8997] hub 1-1:0.253: bad descriptor, ignoring hub [ 431.059311][ T3223] usb 3-1: config 0 descriptor?? [ 431.063218][ T8997] hub: probe of 1-1:0.253 failed with error -5 [ 431.081314][ T8997] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input42 [ 431.105214][ T3223] hub 3-1:0.253: bad descriptor, ignoring hub [ 431.111534][ T3223] hub: probe of 3-1:0.253 failed with error -5 [ 431.159787][ T9113] usb 4-1: USB disconnect, device number 22 [ 431.193834][ T8712] usb 5-1: new high-speed USB device number 7 using dummy_hcd 10:15:37 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) [ 431.333367][ T8997] usb 1-1: USB disconnect, device number 35 [ 431.475642][ T3223] usb 3-1: USB disconnect, device number 30 [ 431.555105][ T8712] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 431.564293][ T8712] usb 5-1: config 0 has no interface number 0 [ 431.570552][ T8712] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.580854][ T8712] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 431.590255][ T8712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.641175][ T8712] usb 5-1: config 0 descriptor?? [ 431.687864][ T8712] hub 5-1:0.253: bad descriptor, ignoring hub [ 431.695757][ T8712] hub: probe of 5-1:0.253 failed with error -5 [ 431.709153][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input43 10:15:37 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:37 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 431.906454][ T3223] usb 2-1: new high-speed USB device number 35 using dummy_hcd 10:15:38 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 432.095846][ T8711] usb 5-1: USB disconnect, device number 7 [ 432.279035][ T3223] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 432.287671][ T3223] usb 2-1: config 0 has no interface number 0 [ 432.294442][ T3223] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 432.304921][ T3223] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 432.314270][ T3223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.331121][ T3223] usb 2-1: config 0 descriptor?? [ 432.353897][T10979] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 432.375557][ T3223] hub 2-1:0.253: bad descriptor, ignoring hub [ 432.382624][ T3223] hub: probe of 2-1:0.253 failed with error -5 [ 432.432209][ T3223] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input44 [ 432.482557][ T9113] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 432.523596][ T8712] usb 1-1: new high-speed USB device number 36 using dummy_hcd 10:15:38 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) [ 432.722536][ T8662] usb 2-1: USB disconnect, device number 35 [ 432.816790][ T3223] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 432.856153][ T9113] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 432.864923][ T9113] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.875428][ T9113] usb 4-1: config 0 has no interface number 0 [ 432.881785][ T9113] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 432.891150][ T9113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.922983][ T8712] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 432.931318][ T8712] usb 1-1: config 0 has no interface number 0 [ 432.937745][ T8712] usb 1-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.947974][ T8712] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 432.958129][ T8712] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 432.967354][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.994655][ T9113] usb 4-1: config 0 descriptor?? [ 433.003234][ T8712] usb 1-1: config 0 descriptor?? [ 433.035463][ T9113] hub 4-1:0.253: bad descriptor, ignoring hub [ 433.041792][ T9113] hub: probe of 4-1:0.253 failed with error -5 [ 433.079822][ T8712] hub 1-1:0.253: bad descriptor, ignoring hub [ 433.086407][ T8712] hub: probe of 1-1:0.253 failed with error -5 [ 433.100328][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input45 10:15:39 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) [ 433.266018][ T3223] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 433.274635][ T3223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.285165][ T3223] usb 3-1: config 0 has no interface number 0 [ 433.291440][ T3223] usb 3-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 433.304881][ T3223] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 433.314561][ T3223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.472489][ T8712] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 433.494200][ T9113] usb 4-1: USB disconnect, device number 23 [ 433.552875][ T28] usb 1-1: USB disconnect, device number 36 [ 433.569749][ T3223] usb 3-1: config 0 descriptor?? [ 433.629594][ T3223] hub 3-1:0.253: bad descriptor, ignoring hub [ 433.636076][ T3223] hub: probe of 3-1:0.253 failed with error -5 10:15:39 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 433.832933][ T8712] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 433.841367][ T8712] usb 5-1: config 0 has no interface number 0 [ 433.848069][ T8712] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.852118][ T8997] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 433.858383][ T8712] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 433.875635][ T8712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.945504][ T8711] usb 3-1: USB disconnect, device number 31 10:15:40 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 434.086619][ T8712] usb 5-1: config 0 descriptor?? [ 434.138729][ T8712] hub 5-1:0.253: bad descriptor, ignoring hub [ 434.145244][ T8712] hub: probe of 5-1:0.253 failed with error -5 [ 434.158545][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input46 10:15:40 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 434.257914][ T8997] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 434.266402][ T8997] usb 2-1: config 0 has no interface number 0 [ 434.272856][ T8997] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 434.283299][ T8997] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 434.292628][ T8997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.354447][ T8712] usb 5-1: USB disconnect, device number 8 10:15:40 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 434.570936][ T8997] usb 2-1: config 0 descriptor?? [ 434.593657][T11042] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 434.636154][ T8997] hub 2-1:0.253: bad descriptor, ignoring hub [ 434.642544][ T8997] hub: probe of 2-1:0.253 failed with error -5 [ 434.656106][ T8997] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input47 [ 434.692404][ T28] usb 4-1: new high-speed USB device number 24 using dummy_hcd 10:15:40 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) [ 434.962779][ T8662] usb 2-1: USB disconnect, device number 36 [ 435.032679][ T8712] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 435.063345][ T28] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 435.071757][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.082542][ T28] usb 4-1: config 0 has no interface number 0 [ 435.088814][ T28] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 435.098210][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.163146][ T8997] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 435.193260][ T28] usb 4-1: config 0 descriptor?? [ 435.234311][ T28] hub 4-1:0.253: bad descriptor, ignoring hub [ 435.240632][ T28] hub: probe of 4-1:0.253 failed with error -5 [ 435.442965][ T8712] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 435.451453][ T8712] usb 1-1: config 0 has no interface number 0 [ 435.458122][ T8712] usb 1-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.468855][ T8712] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 435.479158][ T8712] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 10:15:41 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) [ 435.488562][ T8712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.503505][ T8711] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 435.539821][ T8712] usb 1-1: config 0 descriptor?? [ 435.552763][ T28] usb 4-1: USB disconnect, device number 24 [ 435.562566][ T8997] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 435.570896][ T8997] usb 3-1: config 0 has no interface number 0 [ 435.577235][ T8997] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.587027][ T8712] hub 1-1:0.253: bad descriptor, ignoring hub [ 435.587374][ T8997] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 435.593594][ T8712] hub: probe of 1-1:0.253 failed with error -5 [ 435.602645][ T8997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.624661][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input48 [ 435.705072][ T8997] usb 3-1: config 0 descriptor?? [ 435.746822][ T8997] hub 3-1:0.253: bad descriptor, ignoring hub [ 435.753264][ T8997] hub: probe of 3-1:0.253 failed with error -5 [ 435.766670][ T8997] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input49 [ 435.865572][ T8712] usb 1-1: USB disconnect, device number 37 [ 435.954316][ T8711] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 435.962766][ T8711] usb 5-1: config 0 has no interface number 0 [ 435.969011][ T8711] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.979225][ T8711] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 435.988495][ T8711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.022656][ T8711] usb 5-1: config 0 descriptor?? 10:15:42 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 436.066998][ T8711] hub 5-1:0.253: bad descriptor, ignoring hub [ 436.073501][ T8711] hub: probe of 5-1:0.253 failed with error -5 [ 436.087069][ T8711] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input50 [ 436.123371][ T8997] usb 3-1: USB disconnect, device number 32 [ 436.173644][ T5] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 436.184374][T11093] IPVS: ftp: loaded support on port[0] = 21 [ 436.415194][ T8997] usb 5-1: USB disconnect, device number 9 10:15:42 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 436.593365][ T5] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 436.601893][ T5] usb 2-1: config 0 has no interface number 0 [ 436.608234][ T5] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 436.618736][ T5] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 436.628417][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:42 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 436.768976][ T5] usb 2-1: config 0 descriptor?? [ 436.793450][T11123] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 436.820693][ T5] hub 2-1:0.253: bad descriptor, ignoring hub [ 436.827712][ T5] hub: probe of 2-1:0.253 failed with error -5 [ 436.841071][ T5] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input51 [ 436.853376][ T8997] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 436.936331][T11093] chnl_net:caif_netlink_parms(): no params data found 10:15:43 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) [ 437.214466][ T8712] usb 2-1: USB disconnect, device number 37 [ 437.233061][ T8997] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 437.241416][ T8997] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.252002][ T8997] usb 4-1: config 0 has no interface number 0 [ 437.258283][ T8997] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 437.267569][ T8997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.334971][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.342378][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.352248][T11093] device bridge_slave_0 entered promiscuous mode [ 437.366101][ T8997] usb 4-1: config 0 descriptor?? [ 437.376676][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.384426][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.404892][ T8997] hub 4-1:0.253: bad descriptor, ignoring hub [ 437.411344][ T8997] hub: probe of 4-1:0.253 failed with error -5 [ 437.452996][ T8662] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 437.460891][T11093] device bridge_slave_1 entered promiscuous mode [ 437.575890][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.599233][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.642147][ T8712] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 437.744768][T11093] team0: Port device team_slave_0 added [ 437.753549][ T8711] usb 4-1: USB disconnect, device number 25 [ 437.803330][T11093] team0: Port device team_slave_1 added [ 437.813845][ T8662] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 437.822360][ T8662] usb 1-1: config 0 has no interface number 0 [ 437.828633][ T8662] usb 1-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.838928][ T8662] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 10:15:43 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) [ 437.847002][ T8997] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 437.849166][ T8662] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 437.866134][ T8662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.005414][T11093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.013056][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.039456][T11093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.054884][ T8662] usb 1-1: config 0 descriptor?? [ 438.066524][T11093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.074097][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.102188][T11093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.107883][ T8711] Bluetooth: hci5: command 0x0409 tx timeout [ 438.116225][ T8712] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 438.127491][ T8712] usb 3-1: config 0 has no interface number 0 [ 438.133969][ T8712] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.144269][ T8712] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 438.153604][ T8712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.173375][ T8662] hub 1-1:0.253: bad descriptor, ignoring hub [ 438.179703][ T8662] hub: probe of 1-1:0.253 failed with error -5 [ 438.193171][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input52 [ 438.214139][ T8712] usb 3-1: config 0 descriptor?? [ 438.252961][ T8997] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 438.261304][ T8997] usb 5-1: config 0 has no interface number 0 [ 438.265188][ T8712] hub 3-1:0.253: bad descriptor, ignoring hub [ 438.267851][ T8997] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.273807][ T8712] hub: probe of 3-1:0.253 failed with error -5 [ 438.283803][ T8997] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 438.296163][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input53 [ 438.299199][ T8997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:44 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 438.539826][ T8662] usb 1-1: USB disconnect, device number 38 [ 438.552498][ T8997] usb 5-1: config 0 descriptor?? [ 438.604235][ T8997] hub 5-1:0.253: bad descriptor, ignoring hub [ 438.610581][ T8997] hub: probe of 5-1:0.253 failed with error -5 [ 438.624605][ T8997] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input54 [ 438.790645][T11093] device hsr_slave_0 entered promiscuous mode [ 438.812232][ T5] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 438.845599][T11093] device hsr_slave_1 entered promiscuous mode [ 438.869908][T11093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.877705][T11093] Cannot create hsr debugfs directory [ 438.939352][ T8711] usb 5-1: USB disconnect, device number 10 [ 439.191842][ T8712] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 439.217569][ T5] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 439.226312][ T5] usb 2-1: config 0 has no interface number 0 [ 439.232767][ T5] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 439.243224][ T5] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 439.252650][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.286255][ T5] usb 2-1: config 0 descriptor?? [ 439.316525][T11374] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 439.337765][ T5] hub 2-1:0.253: bad descriptor, ignoring hub [ 439.349754][ T5] hub: probe of 2-1:0.253 failed with error -5 [ 439.363494][ T5] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input55 [ 439.555529][ T8712] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 439.564008][ T8712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.575093][ T8712] usb 4-1: config 0 has no interface number 0 [ 439.581374][ T8712] usb 4-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.594698][ T8712] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 439.603979][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.672363][ T5] usb 2-1: USB disconnect, device number 38 [ 439.703034][ T8712] usb 4-1: config 0 descriptor?? [ 439.746429][ T8712] hub 4-1:0.253: bad descriptor, ignoring hub [ 439.753109][ T8712] hub: probe of 4-1:0.253 failed with error -5 [ 439.908968][T11093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 439.964156][T11093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 440.008750][T11093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 440.061814][T11093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 440.174012][ T9113] Bluetooth: hci5: command 0x041b tx timeout [ 440.756230][T11093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.805105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.815597][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.842607][T11093] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.870330][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.881288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.890860][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.898744][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.980302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.989862][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.000733][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.010665][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.018068][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.027392][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.038704][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.049921][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.060658][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.157217][T11093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 441.168316][T11093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 441.260490][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.270552][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.282178][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.292722][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.302567][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.313114][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.322976][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.332758][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.340551][ T8997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.370633][T11093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.381241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.707473][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 441.717775][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.952541][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 441.962451][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.068205][T11093] device veth0_vlan entered promiscuous mode [ 442.101595][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.110809][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.193420][ T9113] usb 4-1: USB disconnect, device number 26 [ 442.253094][ T8712] Bluetooth: hci5: command 0x040f tx timeout [ 442.326219][T11093] device veth1_vlan entered promiscuous mode [ 442.564563][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.574581][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.606830][T11093] device veth0_macvtap entered promiscuous mode [ 442.642685][T11093] device veth1_macvtap entered promiscuous mode [ 442.859991][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.870809][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.881041][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.893039][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.903300][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.914010][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.924129][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.934725][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.945102][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.955640][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.969978][T11093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.984238][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.996729][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.008090][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.018253][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.592427][ T8712] usb 3-1: USB disconnect, device number 33 [ 443.781556][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.792582][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.802671][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.813351][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.823422][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.834022][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.844215][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.854821][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.865168][T11093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.875770][T11093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.890150][T11093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.908144][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.919100][ T8711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.332775][ T8712] Bluetooth: hci5: command 0x0419 tx timeout [ 445.134834][ T8712] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 445.502979][ T8712] usb 6-1: config 0 has an invalid interface number: 253 but max is 0 [ 445.511638][ T8712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.522292][ T8712] usb 6-1: config 0 has no interface number 0 [ 445.528567][ T8712] usb 6-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.542788][ T8712] usb 6-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 445.552169][ T8712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.907144][ T8712] usb 6-1: config 0 descriptor?? [ 445.981038][ T8712] hub 6-1:0.253: bad descriptor, ignoring hub [ 445.987748][ T8712] hub: probe of 6-1:0.253 failed with error -5 [ 446.392575][ T8712] usb 6-1: USB disconnect, device number 2 10:15:53 executing program 5: 10:15:53 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) 10:15:53 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:15:53 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:53 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:53 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:53 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 447.621907][ T28] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 447.629822][ T9503] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 447.638212][ T8712] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 447.663132][ T8662] usb 1-1: new high-speed USB device number 39 using dummy_hcd 10:15:53 executing program 5: r0 = socket(0x1c, 0x5, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000001540), 0xb) [ 447.992814][ T9503] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 448.001799][ T9503] usb 3-1: config 0 has no interface number 0 [ 448.008070][ T9503] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.018400][ T9503] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 448.027779][ T9503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.037237][ T28] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 448.045974][ T28] usb 2-1: config 0 has no interface number 0 [ 448.052328][ T28] usb 2-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 448.062744][ T28] usb 2-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 448.072137][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.082674][ T8712] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 10:15:54 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 448.091018][ T8712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.101720][ T8712] usb 4-1: config 0 has no interface number 0 [ 448.107996][ T8712] usb 4-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.121443][ T8712] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 448.130641][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.142440][ T8662] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 448.142557][ T8662] usb 1-1: config 0 has no interface number 0 [ 448.142699][ T8662] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 448.167368][ T8662] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 448.176624][ T8662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.213396][ T8662] usb 1-1: config 0 descriptor?? [ 448.221542][ T9503] usb 3-1: config 0 descriptor?? [ 448.229023][ T28] usb 2-1: config 0 descriptor?? [ 448.235881][T11527] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 448.248975][ T8712] usb 4-1: config 0 descriptor?? [ 448.260765][T11522] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 448.270513][ T8662] hub 1-1:0.253: bad descriptor, ignoring hub [ 448.277235][ T8662] hub: probe of 1-1:0.253 failed with error -5 [ 448.291488][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input56 [ 448.305624][ T9503] hub 3-1:0.253: bad descriptor, ignoring hub [ 448.312162][ T9503] hub: probe of 3-1:0.253 failed with error -5 [ 448.325517][ T9503] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input57 [ 448.353961][ T28] hub 2-1:0.253: bad descriptor, ignoring hub [ 448.360301][ T28] hub: probe of 2-1:0.253 failed with error -5 [ 448.374055][ T28] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.253/input/input58 [ 448.390739][ T8712] hub 4-1:0.253: bad descriptor, ignoring hub [ 448.397248][ T8712] hub: probe of 4-1:0.253 failed with error -5 [ 448.515436][ T8662] usb 1-1: USB disconnect, device number 39 10:15:54 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect(r0, &(0x7f0000000440)=@in6={0x1c, 0x1c}, 0x1c) [ 448.711965][ T28] usb 2-1: USB disconnect, device number 39 10:15:55 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:15:55 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)=0x98) 10:15:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1c1c"], &(0x7f0000000000)=0x98) 10:15:55 executing program 4: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 449.822957][ T3774] usb 4-1: USB disconnect, device number 27 [ 449.826380][ T8712] usb 3-1: USB disconnect, device number 34 10:15:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="1c1c"], &(0x7f0000000040)=0x98) 10:15:56 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000100)=ANY=[@ANYBLOB="1c1c"], &(0x7f0000000040)=0x98) [ 450.102595][ T8662] usb 1-1: new high-speed USB device number 40 using dummy_hcd 10:15:56 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:15:56 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 450.472107][ T8662] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 450.480549][ T8662] usb 1-1: config 0 has no interface number 0 [ 450.487295][ T8662] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 450.497700][ T8662] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 450.507037][ T8662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:15:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000640)='*!vm]1\x05\x10\xbb\xfb\xb1\xe70S\x00\x00\x00\x1a=m\xcf\xd7E{\x16#\xecp\xbb\xc9\x12\xaa\x97j\x19\x89lj\x030x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 10:15:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) 10:15:59 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 453.675515][ T8662] usb 1-1: USB disconnect, device number 42 [ 453.822229][ T9503] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 453.830603][ T9503] usb 3-1: config 0 has no interface number 0 [ 453.837182][ T9503] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.847432][ T9503] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 453.857498][ T9503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.073655][ T9503] usb 3-1: config 0 descriptor?? [ 454.148237][ T9503] hub 3-1:0.253: bad descriptor, ignoring hub [ 454.154695][ T9503] hub: probe of 3-1:0.253 failed with error -5 [ 454.167973][ T9503] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input62 10:16:00 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) [ 454.341186][ T8997] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 454.433215][ T9503] usb 3-1: USB disconnect, device number 36 [ 454.481586][ T3774] usb 5-1: new high-speed USB device number 11 using dummy_hcd 10:16:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000010100000002000000e0"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 454.756113][ T8997] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 454.764524][ T8997] usb 4-1: config 0 has no interface number 0 [ 454.770813][ T8997] usb 4-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.781113][ T8997] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 454.790302][ T8997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.804640][ T3774] usb 5-1: device descriptor read/64, error 18 [ 454.922967][ T8997] usb 4-1: config 0 descriptor?? [ 454.941326][ T8662] usb 1-1: new high-speed USB device number 43 using dummy_hcd 10:16:00 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff000905"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 454.975686][ T8997] hub 4-1:0.253: bad descriptor, ignoring hub [ 454.982059][ T8997] hub: probe of 4-1:0.253 failed with error -5 [ 454.995561][ T8997] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input63 [ 455.251293][ T3774] usb 5-1: device descriptor read/64, error 18 [ 455.302190][ T8662] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 455.310540][ T8662] usb 1-1: config 0 has no interface number 0 [ 455.317135][ T8662] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 455.327527][ T8662] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 455.336943][ T8662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.541271][ T3774] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 455.582166][ T8662] usb 1-1: config 0 descriptor?? 10:16:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x29, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x104) [ 455.602500][T11751] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 455.623965][ T8662] hub 1-1:0.253: bad descriptor, ignoring hub [ 455.630278][ T8662] hub: probe of 1-1:0.253 failed with error -5 [ 455.643865][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input64 [ 455.695678][ T8711] usb 4-1: USB disconnect, device number 29 10:16:01 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe000000905820249"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[], 0x0) [ 455.842340][ T3774] usb 5-1: device descriptor read/64, error 18 [ 455.855097][ T9979] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 455.905049][ T8662] usb 1-1: USB disconnect, device number 43 10:16:02 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 456.231741][ T3774] usb 5-1: device descriptor read/64, error 18 [ 456.254907][ T9979] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 456.263314][ T9979] usb 3-1: config 0 has no interface number 0 [ 456.269567][ T9979] usb 3-1: config 0 interface 253 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 456.280575][ T9979] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 456.289894][ T9979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:16:02 executing program 5: close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101001, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000640)='*!vm]1\x05\x10\xbb\xfb\xb1\xe70S\x00\x00\x00\x1a=m\xcf\xd7E{\x16#\xecp\xbb\xc9\x12\xaa\x97j\x19\x89lj\x030x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 10:16:05 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff000905"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 459.607806][ T28] usb 4-1: config 0 descriptor?? [ 459.656323][ T28] hub 4-1:0.253: bad descriptor, ignoring hub [ 459.662900][ T28] hub: probe of 4-1:0.253 failed with error -5 [ 459.677103][ T28] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input67 [ 459.692444][ T3774] usb 2-1: USB disconnect, device number 41 [ 459.866585][ T9979] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 460.003476][ T8712] usb 4-1: USB disconnect, device number 31 [ 460.281313][ T9979] usb 1-1: config 0 has an invalid interface number: 253 but max is 0 [ 460.289769][ T9979] usb 1-1: config 0 has no interface number 0 [ 460.296193][ T9979] usb 1-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 460.306462][ T9979] usb 1-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 460.315855][ T9979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.341636][ T28] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 460.494879][ T9979] usb 1-1: config 0 descriptor?? [ 460.512586][T11908] raw-gadget gadget: fail, usb_ep_enable returned -22 10:16:06 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) clone3(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000480)=""/209, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0], 0x9, {r2}}, 0x58) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x104) [ 460.542590][ T9979] hub 1-1:0.253: bad descriptor, ignoring hub [ 460.548913][ T9979] hub: probe of 1-1:0.253 failed with error -5 [ 460.562483][ T9979] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.253/input/input68 10:16:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r1) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:06 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 460.703149][ T28] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 460.711840][ T28] usb 3-1: config 0 has no interface number 0 [ 460.718092][ T28] usb 3-1: config 0 interface 253 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 460.729423][ T28] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 460.738783][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.851609][ T9979] usb 1-1: USB disconnect, device number 45 [ 460.878209][ T28] usb 3-1: config 0 descriptor?? 10:16:06 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 460.925334][ T28] hub 3-1:0.253: bad descriptor, ignoring hub [ 460.931808][ T28] hub: probe of 3-1:0.253 failed with error -5 [ 461.263443][ T9113] usb 3-1: USB disconnect, device number 39 [ 461.460882][ T8662] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 461.771332][ T3774] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 461.841951][ T8662] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 461.850405][ T8662] usb 4-1: config 0 has no interface number 0 [ 461.857081][ T8662] usb 4-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.867400][ T8662] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 461.877609][ T8662] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 10:16:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x0}) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r2) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 461.886912][ T8662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:16:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r0) 10:16:07 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:16:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r1) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 462.102078][ T3774] usb 5-1: device descriptor read/64, error 18 [ 462.319711][ T8662] usb 4-1: config 0 descriptor?? [ 462.365870][ T8662] hub 4-1:0.253: bad descriptor, ignoring hub [ 462.376424][ T8662] hub: probe of 4-1:0.253 failed with error -5 [ 462.389809][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input69 [ 462.511249][ T3774] usb 5-1: device descriptor read/64, error 18 [ 462.685004][ T8662] usb 4-1: USB disconnect, device number 32 [ 462.761478][ T9113] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 462.791133][ T3774] usb 5-1: new high-speed USB device number 16 using dummy_hcd 10:16:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r1) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r1) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 463.071141][ T3774] usb 5-1: device descriptor read/64, error 18 [ 463.162852][ T9113] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 463.171596][ T9113] usb 3-1: config 0 has no interface number 0 [ 463.177873][ T9113] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.188606][ T9113] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 463.197946][ T9113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.219569][ T9113] usb 3-1: config 0 descriptor?? 10:16:09 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 463.263870][ T9113] hub 3-1:0.253: bad descriptor, ignoring hub [ 463.270184][ T9113] hub: probe of 3-1:0.253 failed with error -5 [ 463.283735][ T9113] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input70 10:16:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000640)='*!vm]1\x05\x10\xbb\xfb\xb1\xe70S\x00\x00\x00\x1a=m\xcf\xd7E{\x16#\xecp\xbb\xc9\x12\xaa\x97j\x19\x89lj\x030x0, &(0x7f00000001c0)) syz_io_uring_complete(r1) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 463.961182][ T8712] usb 4-1: new high-speed USB device number 33 using dummy_hcd 10:16:10 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) [ 464.311077][ T3774] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 464.351916][ T8712] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 464.360376][ T8712] usb 4-1: config 0 has no interface number 0 [ 464.366837][ T8712] usb 4-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.377196][ T8712] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 464.387519][ T8712] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 464.396895][ T8712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.556493][ T8712] usb 4-1: config 0 descriptor?? 10:16:10 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r1) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:10 executing program 1: [ 464.603146][ T8712] hub 4-1:0.253: bad descriptor, ignoring hub [ 464.609810][ T8712] hub: probe of 4-1:0.253 failed with error -5 [ 464.623432][ T8712] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input71 [ 464.644285][ T3774] usb 5-1: device descriptor read/8, error -71 [ 464.810966][ T28] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 464.891050][ T3774] usb 5-1: device descriptor read/8, error -71 [ 464.923163][ T8712] usb 4-1: USB disconnect, device number 33 10:16:11 executing program 0: [ 465.181623][ T28] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 465.189992][ T28] usb 3-1: config 0 has no interface number 0 [ 465.196531][ T28] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.207003][ T28] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 465.216650][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:16:11 executing program 1: [ 465.400838][ T3774] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 465.427704][ T28] usb 3-1: config 0 descriptor?? 10:16:11 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r1) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 465.476393][ T28] hub 3-1:0.253: bad descriptor, ignoring hub [ 465.483351][ T28] hub: probe of 3-1:0.253 failed with error -5 [ 465.496682][ T28] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input72 [ 465.582124][ T3774] usb 5-1: device descriptor read/8, error -61 [ 465.742090][ T28] usb 3-1: USB disconnect, device number 41 10:16:11 executing program 0: [ 465.871551][ T3774] usb 5-1: device descriptor read/8, error -61 10:16:11 executing program 1: [ 465.992227][ T3774] usb usb5-port1: unable to enumerate USB device 10:16:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r1) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 466.186425][ T8662] usb 4-1: new high-speed USB device number 34 using dummy_hcd 10:16:12 executing program 0: 10:16:12 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) [ 466.551575][ T8662] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 466.560157][ T8662] usb 4-1: config 0 has no interface number 0 [ 466.566652][ T8662] usb 4-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.576948][ T8662] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 466.587181][ T8662] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 466.596498][ T8662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.621297][ T8662] usb 4-1: config 0 descriptor?? [ 466.662540][ T8662] hub 4-1:0.253: bad descriptor, ignoring hub [ 466.668858][ T8662] hub: probe of 4-1:0.253 failed with error -5 [ 466.682413][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input73 [ 466.991161][ T3774] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 467.035444][ T5] usb 4-1: USB disconnect, device number 34 [ 467.051837][ T28] Bluetooth: hci0: command 0x0406 tx timeout [ 467.361913][ T3774] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 467.370265][ T3774] usb 3-1: config 0 has no interface number 0 [ 467.376743][ T3774] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.386979][ T3774] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 467.396274][ T3774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.507074][ T3774] usb 3-1: config 0 descriptor?? [ 467.553213][ T3774] hub 3-1:0.253: bad descriptor, ignoring hub [ 467.559636][ T3774] hub: probe of 3-1:0.253 failed with error -5 [ 467.594597][ T3774] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input74 [ 467.871111][ T8662] usb 3-1: USB disconnect, device number 42 10:16:14 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:14 executing program 1: 10:16:14 executing program 0: 10:16:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_io_uring_complete(r1) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:14 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:16:14 executing program 0: 10:16:14 executing program 1: 10:16:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:14 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) [ 468.561064][ T3774] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 468.562268][ T28] usb 5-1: new high-speed USB device number 19 using dummy_hcd 10:16:14 executing program 0: [ 468.852007][ T28] usb 5-1: device descriptor read/64, error 18 10:16:14 executing program 1: [ 468.941575][ T3774] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 468.950193][ T3774] usb 4-1: config 0 has no interface number 0 [ 468.956621][ T3774] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 468.967057][ T3774] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 468.976362][ T3774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.090534][ T5] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 469.159334][ T3774] usb 4-1: config 0 descriptor?? [ 469.182735][T12188] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 469.206429][ T3774] hub 4-1:0.253: bad descriptor, ignoring hub [ 469.212909][ T3774] hub: probe of 4-1:0.253 failed with error -5 [ 469.227055][ T3774] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input75 [ 469.250483][ T28] usb 5-1: device descriptor read/64, error 18 10:16:15 executing program 1: [ 469.444428][ T3774] usb 4-1: USB disconnect, device number 35 [ 469.512308][ T5] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 469.520767][ T5] usb 3-1: config 0 has no interface number 0 [ 469.527197][ T5] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.537470][ T5] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 469.542083][ T28] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 469.546808][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.640709][ T5] usb 3-1: config 0 descriptor?? [ 469.702293][ T5] hub 3-1:0.253: bad descriptor, ignoring hub [ 469.708747][ T5] hub: probe of 3-1:0.253 failed with error -5 [ 469.722314][ T5] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input76 [ 469.833185][ T28] usb 5-1: device descriptor read/64, error 18 [ 470.082848][ T5] usb 3-1: USB disconnect, device number 43 [ 470.220469][ T28] usb 5-1: device descriptor read/64, error 18 [ 470.340805][ T28] usb usb5-port1: attempt power cycle [ 471.050610][ T28] usb 5-1: new high-speed USB device number 21 using dummy_hcd 10:16:17 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:17 executing program 0: 10:16:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:17 executing program 1: 10:16:17 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:16:17 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) [ 471.240770][ T28] usb 5-1: device descriptor read/8, error -71 [ 471.487867][ T28] usb 5-1: device descriptor read/8, error -71 10:16:17 executing program 0: 10:16:17 executing program 1: [ 471.676879][ T8662] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 471.692615][ T9503] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 472.112459][ T9503] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 472.120942][ T9503] usb 3-1: config 0 has no interface number 0 [ 472.127220][ T9503] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.137819][ T9503] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 472.147405][ T9503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.157044][ T8662] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 472.165588][ T8662] usb 4-1: config 0 has no interface number 0 [ 472.172774][ T8662] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 472.183202][ T8662] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 472.192506][ T8662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.201957][ T28] usb 5-1: new high-speed USB device number 22 using dummy_hcd 10:16:18 executing program 1: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) 10:16:18 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) [ 472.330501][ T8662] usb 4-1: config 0 descriptor?? [ 472.338613][ T9503] usb 3-1: config 0 descriptor?? [ 472.351710][T12259] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 472.392714][ T8662] hub 4-1:0.253: bad descriptor, ignoring hub [ 472.399159][ T8662] hub: probe of 4-1:0.253 failed with error -5 [ 472.413116][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input77 [ 472.427059][ T28] usb 5-1: device descriptor read/8, error -61 10:16:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 472.443876][ T9503] hub 3-1:0.253: bad descriptor, ignoring hub [ 472.450570][ T9503] hub: probe of 3-1:0.253 failed with error -5 [ 472.464127][ T9503] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input78 [ 472.602446][ T8662] usb 4-1: USB disconnect, device number 36 [ 472.616292][ T9503] usb 3-1: USB disconnect, device number 44 [ 472.703622][ T28] usb 5-1: device descriptor read/8, error -61 [ 472.834174][ T28] usb usb5-port1: unable to enumerate USB device 10:16:18 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r0, &(0x7f0000000280)=""/4096, 0x20001280) 10:16:20 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:20 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, 0x0, 0x0) 10:16:20 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:16:20 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) 10:16:20 executing program 1: r0 = io_uring_setup(0x5527, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 10:16:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 475.100929][ T9503] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 475.161597][ T5] usb 3-1: new high-speed USB device number 45 using dummy_hcd 10:16:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f00000006c0)) 10:16:21 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 475.431195][ T8712] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 475.481333][ T9503] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 475.490193][ T9503] usb 4-1: config 0 has no interface number 0 [ 475.496472][ T9503] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 475.507008][ T9503] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 475.516492][ T9503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.611420][ T5] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 475.620127][ T5] usb 3-1: config 0 has no interface number 0 [ 475.626472][ T5] usb 3-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.637517][ T5] usb 3-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 475.647302][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.681772][ T9503] usb 4-1: config 0 descriptor?? [ 475.706795][T12327] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 475.742614][ T9503] hub 4-1:0.253: bad descriptor, ignoring hub [ 475.748963][ T9503] hub: probe of 4-1:0.253 failed with error -5 [ 475.762922][ T9503] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input79 [ 475.813097][ T8712] usb 5-1: config 0 has no interfaces? [ 475.819107][ T8712] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 475.828587][ T8712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:16:21 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x2, 0x101202) [ 475.895673][ T5] usb 3-1: config 0 descriptor?? [ 475.916666][ T8712] usb 5-1: config 0 descriptor?? 10:16:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, 0x0, 0x8800, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:22 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x591000, 0x0) [ 475.974062][ T5] hub 3-1:0.253: bad descriptor, ignoring hub [ 475.980594][ T5] hub: probe of 3-1:0.253 failed with error -5 [ 475.994166][ T5] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.253/input/input80 [ 476.120796][ T8712] usb 4-1: USB disconnect, device number 37 [ 476.169112][ T8662] usb 5-1: USB disconnect, device number 23 [ 476.242605][ T5] usb 3-1: USB disconnect, device number 45 10:16:22 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r0, 0x406, r1) 10:16:22 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) 10:16:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) 10:16:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:23 executing program 2: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x22001) 10:16:23 executing program 0: add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 477.290190][ T8712] Bluetooth: hci1: command 0x0406 tx timeout 10:16:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x18, 0x4800000000000000}}], 0x1, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) close(r0) [ 477.480186][ T8711] usb 4-1: new high-speed USB device number 38 using dummy_hcd 10:16:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 477.630373][ T8712] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 477.911309][ T8711] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 477.920050][ T8711] usb 4-1: config 0 has no interface number 0 [ 477.926327][ T8711] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 477.936762][ T8711] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 477.946275][ T8711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:16:24 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001380)=@x={0x94, 0x5, "db52d32e4912"}) 10:16:24 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff}}) [ 477.991227][ T8712] usb 5-1: config 0 has no interfaces? [ 477.997035][ T8712] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 478.006639][ T8712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:16:24 executing program 2: socketpair(0x2, 0x5, 0x0, &(0x7f0000000100)) [ 478.174961][ T8711] usb 4-1: config 0 descriptor?? [ 478.185110][ T8712] usb 5-1: config 0 descriptor?? [ 478.206474][T12402] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 478.242506][ T8711] hub 4-1:0.253: bad descriptor, ignoring hub [ 478.248848][ T8711] hub: probe of 4-1:0.253 failed with error -5 [ 478.263454][ T8711] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input81 [ 482.645529][ T8711] usb 4-1: USB disconnect, device number 38 10:16:28 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc000000010902"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000640), 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:28 executing program 1: socketpair(0x2, 0x2, 0x0, &(0x7f0000000100)) 10:16:28 executing program 0: io_setup(0xb, &(0x7f0000000040)) 10:16:28 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, 0x0, 0x0, 0x1800) 10:16:28 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) [ 482.939835][ T9979] usb 5-1: USB disconnect, device number 24 10:16:29 executing program 2: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 10:16:29 executing program 0: add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000180)="a4", 0x1, 0xfffffffffffffffd) 10:16:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f000000b5c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f000000b700)={0x0, 0x0, &(0x7f000000b6c0)={&(0x7f000000b600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000005ca6ef0000000a4a00800c00037f"], 0x20}}, 0x0) [ 483.529879][ T9503] usb 4-1: new high-speed USB device number 39 using dummy_hcd 10:16:29 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000200)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) [ 483.923474][ T9503] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 483.932173][ T9503] usb 4-1: config 0 has no interface number 0 [ 483.938434][ T9503] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 483.948999][ T9503] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 483.958399][ T9503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.970182][ T5] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 484.193685][ T9503] usb 4-1: config 0 descriptor?? [ 484.211235][T12482] raw-gadget gadget: fail, usb_ep_enable returned -22 10:16:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:30 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)) [ 484.238346][ T9503] hub 4-1:0.253: bad descriptor, ignoring hub [ 484.244877][ T9503] hub: probe of 4-1:0.253 failed with error -5 [ 484.258266][ T9503] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input82 [ 484.370625][ T5] usb 5-1: config 0 has no interfaces? [ 484.376388][ T5] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 484.386234][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.494182][ T5] usb 5-1: config 0 descriptor?? [ 484.494863][ T9503] usb 4-1: USB disconnect, device number 39 [ 484.757958][ T5] usb 5-1: USB disconnect, device number 25 10:16:31 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:31 executing program 1: r0 = getpid() process_vm_writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/208, 0xd0}, {0x0}, {&(0x7f0000000340)=""/151, 0x97}], 0x3, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f0000000680)=""/182, 0xb6}, {&(0x7f0000000440)=""/82, 0x52}, {0x0}], 0x4, 0x0) 10:16:31 executing program 2: r0 = socket$inet(0x2, 0x3, 0xea) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @broadcast}, {0x6}, 0x2, {0x2, 0x0, @local}, 'geneve0\x00'}) 10:16:31 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)) 10:16:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:31 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581ae86"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) 10:16:31 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)) [ 485.856073][ T9113] usb 4-1: new high-speed USB device number 40 using dummy_hcd 10:16:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r1}, 0xc) 10:16:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0xa01}, 0x14}}, 0x0) [ 486.210366][ T5] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 486.223991][ T9113] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 486.232514][ T9113] usb 4-1: config 0 has no interface number 0 [ 486.238785][ T9113] usb 4-1: config 0 interface 253 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 134 [ 486.249390][ T9113] usb 4-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 486.258797][ T9113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.348819][ T9113] usb 4-1: config 0 descriptor?? [ 486.371233][T12539] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 486.392737][ T9113] hub 4-1:0.253: bad descriptor, ignoring hub [ 486.399052][ T9113] hub: probe of 4-1:0.253 failed with error -5 [ 486.412806][ T9113] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.253/input/input83 10:16:32 executing program 2: syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f00000001c0)="f1", 0x1}, {&(0x7f0000000200)="9d", 0x1}], 0x604, &(0x7f00000003c0)) 10:16:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000005000/0x3000)=nil) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty}}) [ 486.610995][ T5] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 486.619421][ T5] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.629867][ T5] usb 5-1: config 0 has no interface number 0 [ 486.636213][ T5] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 486.645605][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.773583][ T8662] usb 4-1: USB disconnect, device number 40 [ 486.801048][ T5] usb 5-1: config 0 descriptor?? [ 486.845566][ T5] hub 5-1:0.253: bad descriptor, ignoring hub [ 486.852639][ T5] hub: probe of 5-1:0.253 failed with error -5 [ 487.161133][ T5] usb 5-1: USB disconnect, device number 26 [ 487.530278][ T9113] Bluetooth: hci2: command 0x0406 tx timeout 10:16:33 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:33 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)) 10:16:33 executing program 1: socketpair(0x2, 0x6, 0x0, &(0x7f0000000100)) 10:16:33 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)) 10:16:33 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6268ef11fbd191, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 487.750248][ T29] audit: type=1400 audit(1598177793.703:9): avc: denied { create } for pid=12599 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 10:16:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) close(r0) 10:16:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0x4020940d, 0x0) 10:16:34 executing program 0: ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000040)) 10:16:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) [ 488.373797][ T3774] usb 5-1: new high-speed USB device number 27 using dummy_hcd 10:16:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="0a0775db7ba12585677926b0d5e383e5b3b6be78f127bc63dc80749972b7e18e0eed5c54dbb7295df0df3a4d224a1eb984566e3975876d34d3c6c964c2a0e521f0", 0x41) 10:16:34 executing program 0: ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000040)) [ 488.752078][ T3774] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 488.760663][ T3774] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.771110][ T3774] usb 5-1: config 0 has no interface number 0 [ 488.777381][ T3774] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 488.786690][ T3774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.967760][ T3774] usb 5-1: config 0 descriptor?? [ 489.037735][ T3774] hub 5-1:0.253: bad descriptor, ignoring hub [ 489.044234][ T3774] hub: probe of 5-1:0.253 failed with error -5 [ 489.343024][ T3774] usb 5-1: USB disconnect, device number 27 10:16:35 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:35 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x0) 10:16:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) 10:16:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:35 executing program 0: ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000040)) 10:16:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) 10:16:36 executing program 1: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='\x00*\xff\xae', 0x0) 10:16:36 executing program 2: socket(0x1e, 0x0, 0xa) 10:16:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) 10:16:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:36 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)) 10:16:36 executing program 1: keyctl$assume_authority(0xb, 0x0) [ 490.602055][ T9979] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 490.980466][ T9979] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 490.988903][ T9979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.999429][ T9979] usb 5-1: config 0 has no interface number 0 [ 491.005712][ T9979] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 491.015031][ T9979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.181338][ T9979] usb 5-1: config 0 descriptor?? [ 491.235197][ T9979] hub 5-1:0.253: bad descriptor, ignoring hub [ 491.241615][ T9979] hub: probe of 5-1:0.253 failed with error -5 [ 491.550625][ T9979] usb 5-1: USB disconnect, device number 28 10:16:37 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:37 executing program 2: socket(0x1, 0x0, 0x9) 10:16:37 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)) 10:16:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) 10:16:37 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000004980)={0x0, 0x0, &(0x7f0000004940)={&(0x7f00000048c0)={0x14}, 0x14}}, 0x0) 10:16:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:38 executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) 10:16:38 executing program 2: process_vm_writev(0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/81, 0x51}, {0x0}], 0x2, 0x0) 10:16:38 executing program 0: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)) 10:16:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80e40a0}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x420, 0x3f3, 0x0, 0x70bd27, 0x25dfdbfd, {0x4, 0x1, 0x28, [0x80000000, 0x5, 0x3, 0x400, 0x2, 0x7f, 0x0, 0x7, 0xffffffc0, 0x0, 0xfeb2, 0x7, 0x0, 0x0, 0x0, 0x5, 0x20, 0x1bd9, 0x0, 0x9, 0x5, 0x0, 0x6, 0x8, 0x0, 0x10001, 0x3119, 0x6e, 0xff, 0x1, 0x7c1e, 0x76ba, 0x26d, 0x0, 0x6, 0x3ff, 0x0, 0x0, 0x0, 0x200, 0xffffffff, 0x1, 0xfff, 0x8, 0x3, 0x20, 0x7f, 0xfff, 0x8, 0x4, 0x8, 0x5, 0xfffffff7, 0x6, 0x7fffffff, 0x0, 0xffffffff, 0x81, 0xc31, 0x1ff, 0x5, 0x0, 0xffff, 0x7f], [0xffffff8e, 0x400, 0x0, 0xad3, 0x8, 0x5b, 0x4, 0xfffff136, 0x1, 0x0, 0x2, 0x7f, 0x3, 0x0, 0x7, 0x7ff, 0x7f92d544, 0x8, 0x6, 0x8, 0xfffffff9, 0x3f, 0x8, 0x8001, 0x1, 0x5, 0x1000, 0x5, 0x4, 0x899, 0x5, 0x2, 0x1e, 0x100, 0x5, 0x0, 0x8, 0x7, 0x8, 0x1, 0x0, 0x5, 0x4, 0x2, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x489165f6, 0x0, 0x40, 0x7715, 0x2, 0x6, 0x7, 0x800, 0x5, 0x2, 0x0, 0x100, 0x7fffffff, 0x4, 0x8], [0x6, 0x0, 0x4, 0x0, 0x0, 0x1, 0x9, 0x1, 0xaed, 0x400, 0xfffffffd, 0x5, 0x96bd, 0x7822, 0x24d, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0xfffffffd, 0x0, 0x78da, 0xfffff335, 0x1, 0x9, 0x80000000, 0x0, 0x6, 0x9, 0x8, 0x7a4d000, 0xe6, 0x7, 0x401, 0x5, 0x1, 0xee, 0x2, 0x4, 0x2, 0x1, 0x7fff, 0x4, 0x3f, 0x8, 0x0, 0xa07, 0x7, 0xffffffff, 0x1, 0x7, 0x81, 0x69, 0x1f, 0xff, 0x0, 0x5, 0x10000000, 0x7fffffff], [0x10000, 0x1d5, 0x80000001, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x10001, 0x7, 0x2, 0x284, 0x0, 0xac00, 0xb4, 0x7, 0x1, 0x1f, 0x0, 0x3, 0x101, 0x4, 0x0, 0x0, 0x1, 0x0, 0x5, 0x38e, 0x0, 0x0, 0x0, 0x343b, 0x40, 0x3f, 0x4, 0x25, 0x9, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x45, 0x3, 0x1ff, 0x0, 0x7, 0x1, 0x7, 0x0, 0x9, 0x8, 0x1f, 0x7, 0x0, 0x5, 0x0, 0x8001, 0x100, 0x9, 0x1]}, [""]}, 0x420}, 0x1, 0x0, 0x0, 0x4080800}, 0x4) 10:16:38 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:38 executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) [ 492.810340][ T9979] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 493.183323][ T9979] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 493.191847][ T9979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.202361][ T9979] usb 5-1: config 0 has no interface number 0 [ 493.208676][ T9979] usb 5-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.222157][ T9979] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 493.231549][ T9979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.378996][ T9979] usb 5-1: config 0 descriptor?? [ 493.432173][ T9979] hub 5-1:0.253: bad descriptor, ignoring hub [ 493.438495][ T9979] hub: probe of 5-1:0.253 failed with error -5 [ 493.750005][ T9503] usb 5-1: USB disconnect, device number 29 10:16:40 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:40 executing program 1: bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:16:40 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) 10:16:40 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000040)) 10:16:40 executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) 10:16:40 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:40 executing program 2: r0 = socket$isdn(0x22, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x1d) 10:16:40 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) 10:16:40 executing program 1: r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 10:16:40 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000040)) 10:16:40 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 494.901108][ T9503] usb 5-1: new high-speed USB device number 30 using dummy_hcd 10:16:41 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='@'], 0x10}}, 0x0) [ 495.260421][ T9503] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 495.268953][ T9503] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.279529][ T9503] usb 5-1: config 0 has no interface number 0 [ 495.285793][ T9503] usb 5-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.299227][ T9503] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 495.308416][ T9503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.510028][ T9503] usb 5-1: config 0 descriptor?? [ 495.551562][ T9503] hub 5-1:0.253: bad descriptor, ignoring hub [ 495.557907][ T9503] hub: probe of 5-1:0.253 failed with error -5 [ 495.870516][ T9503] usb 5-1: USB disconnect, device number 30 10:16:42 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:42 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) 10:16:42 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000040)) 10:16:42 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) 10:16:42 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:42 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/mice\x00', 0x802) write$char_usb(r0, 0x0, 0x0) 10:16:42 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000001080)=0x8) 10:16:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, 0x0) 10:16:42 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14, 0x0, 0x1, 0x101}, 0x14}}, 0x0) 10:16:42 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) read$qrtrtun(r0, &(0x7f0000000040)=""/95, 0x5f) 10:16:42 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:43 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose, @rose, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom, @bcast, @rose, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) [ 497.099331][ T8712] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 497.461161][ T8712] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 497.469664][ T8712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.480450][ T8712] usb 5-1: config 0 has no interface number 0 [ 497.486724][ T8712] usb 5-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.500087][ T8712] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 497.509403][ T8712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.591118][ T8712] usb 5-1: config 0 descriptor?? [ 497.631563][ T8712] hub 5-1:0.253: bad descriptor, ignoring hub [ 497.637901][ T8712] hub: probe of 5-1:0.253 failed with error -5 [ 497.982234][ T9113] usb 5-1: USB disconnect, device number 31 10:16:44 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff0009"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 10:16:44 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, 0x0) 10:16:44 executing program 2: add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 10:16:44 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:44 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x5, 0x0, r0) 10:16:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 10:16:44 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, 0x0) 10:16:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x2}) 10:16:44 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x80) 10:16:44 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 499.139309][ T9113] usb 5-1: new high-speed USB device number 32 using dummy_hcd 10:16:45 executing program 0: socket$nl_sock_diag(0x10, 0x3, 0x4) [ 499.501151][ T9113] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 499.509780][ T9113] usb 5-1: config 0 has no interface number 0 [ 499.516051][ T9113] usb 5-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.529518][ T9113] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 499.538845][ T9113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.689513][ T9113] usb 5-1: config 0 descriptor?? [ 499.735932][ T9113] hub 5-1:0.253: bad descriptor, ignoring hub [ 499.742403][ T9113] hub: probe of 5-1:0.253 failed with error -5 [ 500.059530][ T9113] usb 5-1: USB disconnect, device number 32 10:16:46 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff0009"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x498e82, 0x0) 10:16:46 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140)='security.selinux\x00', 0x0, 0x0, 0x0) 10:16:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 10:16:46 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom, @netrom, @default, @netrom, @netrom, @null]}, 0x48) 10:16:46 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:46 executing program 2: syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x40000) 10:16:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, 0x0}, 0x0) 10:16:47 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) 10:16:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x23c}}, 0x0) 10:16:47 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 501.419520][ T9113] usb 5-1: new high-speed USB device number 33 using dummy_hcd 10:16:47 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="170908000000000000000100fcff04"], 0x5c}}, 0x0) [ 501.802725][ T9113] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 501.811280][ T9113] usb 5-1: config 0 has no interface number 0 [ 501.817544][ T9113] usb 5-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.830970][ T9113] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 501.840281][ T9113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.855613][T12916] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 501.919633][T12917] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 501.956020][ T9113] usb 5-1: config 0 descriptor?? [ 502.006611][ T9113] hub 5-1:0.253: bad descriptor, ignoring hub [ 502.013506][ T9113] hub: probe of 5-1:0.253 failed with error -5 [ 502.320179][ T9113] usb 5-1: USB disconnect, device number 33 10:16:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 10:16:48 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff0009"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, 0x0}, 0x0) 10:16:48 executing program 1: socketpair(0x0, 0x80b, 0x0, &(0x7f0000000080)) 10:16:48 executing program 2: syz_usb_connect$cdc_ncm(0x2, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@country_functional={0x6}, @dmm={0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x20}}}}}}}]}}, 0x0) 10:16:48 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:49 executing program 0: mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 10:16:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, 0x0}, 0x0) 10:16:49 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) [ 503.299526][ T8711] usb 3-1: new full-speed USB device number 46 using dummy_hcd 10:16:49 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, 0x0) 10:16:49 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 503.539155][ T9113] usb 5-1: new high-speed USB device number 34 using dummy_hcd 10:16:49 executing program 1: clock_gettime(0x0, &(0x7f0000000000)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000003f40)) 10:16:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={0x0}}, 0x0) [ 503.705899][ T8711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.716283][ T8711] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 503.909288][ T9113] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 503.909831][ T8711] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.917668][ T9113] usb 5-1: config 0 has no interface number 0 [ 503.926869][ T8711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.933157][ T9113] usb 5-1: config 0 interface 253 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.941139][ T8711] usb 3-1: Product: syz [ 503.941259][ T8711] usb 3-1: Manufacturer: syz [ 503.954430][ T9113] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 503.958571][ T8711] usb 3-1: SerialNumber: syz [ 503.964435][ T9113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.507188][ T9113] usb 5-1: config 0 descriptor?? [ 504.550969][ T9113] hub 5-1:0.253: bad descriptor, ignoring hub [ 504.557302][ T9113] hub: probe of 5-1:0.253 failed with error -5 [ 504.650788][ T8711] cdc_ncm 3-1:1.0: bind() failure [ 504.684252][ T8711] cdc_ncm 3-1:1.1: bind() failure [ 504.717113][ T8711] usb 3-1: USB disconnect, device number 46 [ 504.869562][ T9979] usb 5-1: USB disconnect, device number 34 10:16:51 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff000905"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:51 executing program 0: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x80000000], 0x10000}) socket(0x0, 0x80002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:16:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={0x0}}, 0x0) [ 505.398993][ T8711] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 505.503711][T12989] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 505.791820][ T8711] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.802050][ T8711] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 505.819708][ T9113] usb 5-1: new high-speed USB device number 35 using dummy_hcd 10:16:52 executing program 2: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) 10:16:52 executing program 1: r0 = mq_open(&(0x7f0000000000)='0\x00\x00\x00\x00H\x9b\xcc\xc4\xa6` \bw\xfe\xcdZ\xbd\xd6\xaf\xd4n\xb7a\x12\xb0B\xdc\xffs\n=Z \xc7\xf6\xc6\x9c\xcf\x16\x10\xcefHt\x9e$\x90', 0x0, 0x0, 0x0) mq_notify(r0, 0x0) 10:16:52 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={0x0}}, 0x0) 10:16:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x200000) ioctl$SG_GET_NUM_WAITING(r0, 0x2201, 0x0) [ 506.019349][ T8711] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.028589][ T8711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.036974][ T8711] usb 3-1: Product: syz [ 506.041713][ T8711] usb 3-1: Manufacturer: syz [ 506.046453][ T8711] usb 3-1: SerialNumber: syz [ 506.159643][ T8711] usb 3-1: can't set config #1, error -71 [ 506.192971][ T8711] usb 3-1: USB disconnect, device number 47 [ 506.212853][ T9113] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 506.221762][ T9113] usb 5-1: config 0 has no interface number 0 [ 506.228019][ T9113] usb 5-1: config 0 interface 253 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 506.239434][ T9113] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 506.248623][ T9113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.431909][ T9113] usb 5-1: config 0 descriptor?? 10:16:52 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000000)) [ 506.477556][ T9113] hub 5-1:0.253: bad descriptor, ignoring hub [ 506.484110][ T9113] hub: probe of 5-1:0.253 failed with error -5 10:16:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 10:16:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14}, 0x14}}, 0x0) 10:16:52 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) accept4$packet(r0, 0x0, 0x0, 0x81000) [ 506.809551][ T8711] usb 5-1: USB disconnect, device number 35 10:16:53 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff000905"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:53 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, 0x0) 10:16:53 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:53 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={0x0}}, 0x840) 10:16:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14}, 0x14}}, 0x0) 10:16:53 executing program 2: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 10:16:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={&(0x7f0000008500)={0x14}, 0x14}}, 0x0) 10:16:53 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/snd/timer\x00', 0x20402) 10:16:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)={0x0, 0xfb, 0x101, 0x0, 0x0, "13fabec6a75572adff11b91684d4520a", "0456d8d861c07ae8ba40b1f549cd086fb989bc114f719c87cc33fc6182cff77bc377bbadb6fe509df5628fb3ef063a7da97ed2170ff839cd83577787343e60b21499e341a544db35b9025259f5a96880acf087904d2ba2875129add49a5a2253d33e5708550fdeb3f06746607ecb165fc95ebabde8ed9f96941b4025b39adbcea0a653eb8e3bae27f40a23ec7edb1cadc92fccf2b627433f2d54abebe808bb1514b16d574e3fe34f9b3c06165526fdcb41f63ffbe5a8e0c6d3445e40f0e13ecbb6b357269735d44c1600c5dbe2cf1ca7ecef605e71d7c52ea95b63dc34fe4db10088cedb7c5fb0fa24d38375"}, 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x80000000], 0x10000}) r4 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:16:53 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) accept4$phonet_pipe(r0, 0x0, 0x0, 0x0) [ 508.008791][ T8712] Bluetooth: hci3: command 0x0406 tx timeout [ 508.110402][ T9113] usb 5-1: new high-speed USB device number 36 using dummy_hcd 10:16:54 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f00000001c0)) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:54 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0x5460, 0x0) [ 508.469880][ T9113] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 508.478340][ T9113] usb 5-1: config 0 has no interface number 0 [ 508.484882][ T9113] usb 5-1: config 0 interface 253 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 508.495825][ T9113] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 508.505138][ T9113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.718629][ T9113] usb 5-1: config 0 descriptor?? [ 508.760927][ T9113] hub 5-1:0.253: bad descriptor, ignoring hub [ 508.767253][ T9113] hub: probe of 5-1:0.253 failed with error -5 [ 509.107387][ T3774] usb 5-1: USB disconnect, device number 36 10:16:55 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff000905"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) 10:16:55 executing program 0: socketpair(0x10, 0x3, 0xffff250a, &(0x7f0000000000)) 10:16:55 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 10:16:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 10:16:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) 10:16:55 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:55 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 10:16:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x3, 0x1}, 0x6) 10:16:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)={0x0, 0xfb, 0xf3, 0x0, 0x0, "13fabec6a75572adff11b91684d4520a", "0456d8d861c07ae8ba40b1f549cd086fb989bc114f719c87cc33fc6182cff77bc377bbadb6fe509df5628fb3ef063a7da97ed2170ff839cd83577787343e60b21499e341a544db35b9025259f5a96880acf087904d2ba2875129add49a5a2253d33e5708550fdeb3f06746607ecb165fc95ebabde8ed9f96941b4025b39adbcea0a653eb8e3bae27f40a23ec7edb1cadc92fccf2b627433f2d54abebe808bb1514b16d574e3fe34f9b3c06165526fdcb41f63ffbe5a8e0c6d3445e40f0e13ecbb6b357269735d44c1600c5dbe2cf1ca7ecef605e71d7c52ea95b63dc34fe"}, 0xf3, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x80000000], 0x10000}) r4 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:16:55 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$can_j1939(r0, 0x0, 0x0) 10:16:56 executing program 0: bind$inet(0xffffffffffffffff, 0x0, 0x0) [ 510.308529][ T9113] usb 5-1: new high-speed USB device number 37 using dummy_hcd 10:16:56 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 510.484661][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4601 [ 510.545417][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 510.595992][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 510.642410][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 510.668686][ T9113] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 510.677119][ T9113] usb 5-1: config 0 has no interface number 0 [ 510.683793][ T9113] usb 5-1: config 0 interface 253 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 510.694708][ T9113] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 510.704063][ T9113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.770828][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 510.817651][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 510.884827][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 510.914149][ T9113] usb 5-1: config 0 descriptor?? [ 510.926400][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 510.943743][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 510.953913][T13121] kvm [13113]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 510.969102][ T9113] hub 5-1:0.253: bad descriptor, ignoring hub [ 510.975417][ T9113] hub: probe of 5-1:0.253 failed with error -5 [ 511.309327][ T8662] usb 5-1: USB disconnect, device number 37 10:16:57 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:16:57 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:16:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000140)=0x8) 10:16:57 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x5452, 0x0) 10:16:57 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x300}, 0x0) 10:16:58 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000018c0)) 10:16:58 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 10:16:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @broadcast}]}, &(0x7f00000002c0)=0x10) 10:16:58 executing program 2: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 10:16:58 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:58 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) [ 512.548541][ T9503] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 512.908431][ T9503] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 512.916816][ T9503] usb 5-1: config 0 has no interface number 0 [ 512.923417][ T9503] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.933644][ T9503] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 512.942951][ T9503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.041595][ T9503] usb 5-1: config 0 descriptor?? [ 513.080491][ T9503] hub 5-1:0.253: bad descriptor, ignoring hub [ 513.086841][ T9503] hub: probe of 5-1:0.253 failed with error -5 [ 513.139926][ T9503] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input84 [ 513.398483][ T3774] usb 5-1: USB disconnect, device number 38 10:16:59 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:16:59 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000100), 0x4) 10:16:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x2c, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @private2}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000003c0)=0x10) 10:16:59 executing program 1: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000540)) 10:16:59 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:16:59 executing program 2: fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) 10:17:00 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 10:17:00 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:17:00 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) 10:17:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 10:17:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, 0xc, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}}, 0x0) [ 514.507892][ T8662] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 514.655756][T13235] sctp: [Deprecated]: syz-executor.0 (pid 13235) Use of int in max_burst socket option. [ 514.655756][T13235] Use struct sctp_assoc_value instead 10:17:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0xea) connect$inet(r0, 0x0, 0x0) [ 514.836036][T13242] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 514.868806][ T8662] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 514.877241][ T8662] usb 5-1: config 0 has no interface number 0 [ 514.883703][ T8662] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.894044][ T8662] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 514.903333][ T8662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.121695][ T8662] usb 5-1: config 0 descriptor?? [ 515.159913][ T8662] hub 5-1:0.253: bad descriptor, ignoring hub [ 515.166243][ T8662] hub: probe of 5-1:0.253 failed with error -5 [ 515.179817][ T8662] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input85 [ 515.480469][ T9979] usb 5-1: USB disconnect, device number 39 10:17:01 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000b45000/0x4000)=nil, &(0x7f0000dda000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) 10:17:01 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:17:01 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)) 10:17:01 executing program 2: syz_open_dev$video4linux(0x0, 0x0, 0x0) 10:17:01 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) write$fb(r0, 0x0, 0x0) 10:17:02 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 10:17:02 executing program 1: openat$ashmem(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ashmem\x00', 0x6000, 0x0) 10:17:02 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:17:02 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 10:17:02 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, 0x0) 10:17:02 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x5}, 0x4) 10:17:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0xea) setsockopt$inet_opts(r0, 0x0, 0x16, 0x0, 0x0) [ 516.838490][ T9113] usb 5-1: new high-speed USB device number 40 using dummy_hcd 10:17:03 executing program 2: syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x0, 0x4}}}}, 0x11) 10:17:03 executing program 0: syz_mount_image$nfs(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x7, &(0x7f0000002840)=[{&(0x7f0000001540)="e50b6701bc3c655ee11d3759", 0xc, 0x100}, {&(0x7f0000001580)="02cf5fd60d431054ab0a49ee0ecb99df0ac943e0de392bba2e4528ec04b08d43d69d9dd74167f7a7443b815d8f1a85ab10", 0x31, 0x3}, {&(0x7f00000015c0)="5cf21d748011d2690a88544144b7b4be5881d772fa17b99c4f843586a83976ae55b4845f52e8d6367e08747154796d5aaeb79eb44180252144cdd905056a5feb8a338969d2d7031098e1b9b56786095e8cdd5870a18f6046c6c1b2063cb984d98769975f6caa", 0x66, 0x4}, {&(0x7f0000001640)="9987b9d1390313a8f13a438bbb689ca8d4f6e8a568c1ea00e47fd5833b1e517118ea4c0017da74dad49a06eed1381eb24aac4ca3c3d818dc58f61295507271e7e9dbab", 0x43, 0x80000000}, {&(0x7f00000016c0)="8165c173bc52573394e240f7beaf18df2fed0ca6a4df48ee5efd9ccb007a8905665b7d79904597041910ac762b0eb8f67015fc15a0d2fbf32bca1d6f72c8a3a69704ce9521d024514162308bf0d2b24831", 0x51, 0x800}, {&(0x7f0000001740)="a5c83f1fb8fa3af9a644764aa6e183845dcb3585de19c21e8b8a4879726a819a1137ed607d4ea3a628ad3c14aee12ffea5ca993cddd42c1a4ecb188de2cffddcaf7c87434330862da60a39191f8dcc7f420f12f53bd8c19b7376ba59b84028030133c1245c7627d1052ca6e2633cfd9cd3faf4dc26443e3711d722726e73754834db76c9850937", 0x87, 0x6}, {&(0x7f0000001800)="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", 0x1000, 0x51}], 0x35500c0, &(0x7f0000002900)='^\x00') 10:17:03 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:17:03 executing program 3: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x2002) [ 517.198610][ T9113] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 517.207044][ T9113] usb 5-1: config 0 has no interface number 0 [ 517.213453][ T9113] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.223653][ T9113] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 517.232959][ T9113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 10:17:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) [ 517.412966][ T9113] usb 5-1: config 0 descriptor?? [ 517.444682][ T2277] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 517.461866][ T9113] hub 5-1:0.253: bad descriptor, ignoring hub [ 517.468307][ T9113] hub: probe of 5-1:0.253 failed with error -5 [ 517.481606][ T9113] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input86 [ 517.501643][ T2277] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 517.893816][ T9113] usb 5-1: USB disconnect, device number 40 10:17:04 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) 10:17:04 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 10:17:04 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 10:17:04 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x80001, 0x0) 10:17:04 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x2) 10:17:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)="1c0e487f01226b59d88d004e9c66a7e7", 0x10) 10:17:04 executing program 3: socketpair(0x29, 0x2, 0x40, &(0x7f0000000080)) 10:17:04 executing program 0: r0 = getpgrp(0xffffffffffffffff) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x20000}, 0x0) 10:17:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @empty, 0x4e24, 0x0, 'sh\x00'}, 0x2c) 10:17:04 executing program 2: socket$inet(0x2, 0x3, 0x58) syz_genetlink_get_family_id$netlbl_unlabel(0x0) r0 = socket$inet(0x2, 0x3, 0xea) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0xe0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x1}, 0x18) 10:17:04 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, 0x0) [ 518.948680][T13361] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 518.997154][ T8711] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 519.001418][T13364] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 1, id = 0 10:17:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)=""/120, &(0x7f0000000100)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, 0x0) socket(0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3f}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x80}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa3e6a}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfffffff8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x80}}, 0x0) add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="890dfedae1035f86cf7daf68a4031a05f55f401684121635", 0x18, 0x0) [ 519.368874][ T8711] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 519.377270][ T8711] usb 5-1: config 0 has no interface number 0 [ 519.383526][ T8711] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.393847][ T8711] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 519.403147][ T8711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.548172][T13373] bond0: (slave gre1): ether type (778) is different from other slaves (1), can not enslave it [ 519.579830][ T8711] usb 5-1: config 0 descriptor?? [ 519.629942][ T8711] hub 5-1:0.253: bad descriptor, ignoring hub [ 519.636444][ T8711] hub: probe of 5-1:0.253 failed with error -5 [ 519.679136][ T8711] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input87 [ 519.756684][T13393] bond0: (slave gre1): ether type (778) is different from other slaves (1), can not enslave it [ 519.950990][ T9113] usb 5-1: USB disconnect, device number 41 [ 520.015796][ T0] NOHZ: local_softirq_pending 08 10:17:06 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) 10:17:06 executing program 1: socketpair(0x26, 0x0, 0x0, &(0x7f0000000000)) 10:17:06 executing program 0: getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) 10:17:06 executing program 2: add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000180)="a4", 0x1, 0xfffffffffffffffd) 10:17:06 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, 0x0) 10:17:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140), 0x4) 10:17:06 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 10:17:06 executing program 0: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 10:17:06 executing program 1: socket$isdn(0x22, 0x3, 0x0) 10:17:06 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) 10:17:06 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, 0x0) 10:17:07 executing program 3: r0 = userfaultfd(0x0) syz_io_uring_setup(0x1313, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 521.702363][ T8711] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 522.071199][ T8711] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 522.079761][ T8711] usb 5-1: config 0 has no interface number 0 [ 522.086020][ T8711] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.096376][ T8711] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 522.106148][ T8711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.138301][ T8711] usb 5-1: config 0 descriptor?? [ 522.183636][ T8711] hub 5-1:0.253: bad descriptor, ignoring hub [ 522.191131][ T8711] hub: probe of 5-1:0.253 failed with error -5 [ 522.204384][ T8711] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input88 [ 522.423564][ T8711] usb 5-1: USB disconnect, device number 42 10:17:08 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000977a14015661200a8fc0000000109021b00010000a3000904fd0001a368ff00090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) 10:17:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f0000000080)="4500000038000535a4abd32b8018007a032482c137153e37080001800125d124000000b3e9d3dfd08300000000000000", 0x30}, {&(0x7f0000000100)="6a2a261bb49c3cfd4a93b0ed6022ad8aa9859d8787", 0x15}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x122) 10:17:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x401}]}, &(0x7f0000000300)=0x10) 10:17:08 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000001380)='/dev/snd/pcmC#D#p\x00', 0xe0ffffffffffffff, 0x0) 10:17:08 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) 10:17:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x100, 0x4) [ 523.100071][T13476] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.1'. [ 523.109827][T13476] netlink: get zone limit has 4 unknown bytes [ 523.181029][T13476] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.1'. [ 523.190895][T13476] netlink: get zone limit has 4 unknown bytes 10:17:09 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 10:17:09 executing program 2: bpf$MAP_CREATE(0x4, 0x0, 0x0) 10:17:09 executing program 0: r0 = io_uring_setup(0x5527, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x8000000) 10:17:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x33fe0}}, 0x0) 10:17:09 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) 10:17:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 523.776670][ T9502] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 524.170611][ T9502] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 524.179107][ T9502] usb 5-1: config 0 has no interface number 0 [ 524.185378][ T9502] usb 5-1: config 0 interface 253 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.195814][ T9502] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=fc.a8 [ 524.205180][ T9502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.294477][ T9502] usb 5-1: config 0 descriptor?? [ 524.345859][ T9502] hub 5-1:0.253: bad descriptor, ignoring hub [ 524.352314][ T9502] hub: probe of 5-1:0.253 failed with error -5 [ 524.366753][ T9502] input: USB Touchscreen 6615:0012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.253/input/input89 [ 524.674510][ T9979] usb 5-1: USB disconnect, device number 43 10:17:11 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000001c0)={0x0, 0x0, 0xf}) 10:17:11 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) connect(r0, &(0x7f0000002880)=@caif=@util={0x25, "b989fa2decfe92a0f503f1ad0088e21b"}, 0x80) 10:17:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) close(r0) 10:17:11 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) 10:17:11 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffffa, 0x0) 10:17:11 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:17:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6402c799"}}) 10:17:11 executing program 2: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070080000000080009000000ddff13001f0000000000000000000000ffffe000000108000a0000000000060002"], 0x5c}}, 0x0) 10:17:11 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendto$unix(r0, &(0x7f00000002c0)='x', 0x1, 0x0, 0x0, 0x0) 10:17:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:11 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0]) 10:17:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 525.927613][T13568] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 525.972580][T13571] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x8, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IP6_DADDR={0xffffffda, 0x20, @private0}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_L2SPEC_TYPE, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x6c}}, 0x0) 10:17:12 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffbffffffffff9, 0xa42) 10:17:12 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 10:17:12 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0]) 10:17:12 executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f0000000080)=""/146, 0x92) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)) [ 526.545035][T13585] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. 10:17:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 526.629772][T13590] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. 10:17:12 executing program 3: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 10:17:12 executing program 0: accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) 10:17:12 executing program 2: clone3(&(0x7f0000000300)={0x43100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:17:13 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[0x0]) 10:17:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:13 executing program 3: socketpair(0x1d, 0x0, 0x8, &(0x7f00000000c0)) 10:17:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) 10:17:13 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x5450, 0x0) 10:17:13 executing program 1: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:13 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1ff, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 10:17:13 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:17:14 executing program 3: getsockname$unix(0xffffffffffffffff, 0x0, 0x0) 10:17:14 executing program 2: socketpair(0x2, 0x0, 0x0, &(0x7f0000000100)) 10:17:14 executing program 0: add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0xfffffffffffffffd) 10:17:14 executing program 1: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 528.486359][ T9503] Bluetooth: hci4: command 0x0406 tx timeout 10:17:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000040)) 10:17:14 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:17:14 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) 10:17:15 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x40305828, 0x0) 10:17:15 executing program 2: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x80000000], 0x10000}) socket(0x10, 0x80002, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:17:15 executing program 1: ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:15 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000100)) 10:17:15 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:17:15 executing program 3: syz_io_uring_setup(0x7d5c, &(0x7f0000000240), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000781000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_setup(0x576a, &(0x7f00000000c0)={0x0, 0x9299}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)) [ 529.608374][T13664] kvm_set_msr_common: 109 callbacks suppressed [ 529.608426][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4601 10:17:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:17:15 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 529.723041][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 529.780978][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 529.843498][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:15 executing program 4: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='logon\x00', &(0x7f0000000200)=@builtin='builtin_trusted\x00') [ 529.940475][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 530.062716][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:16 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:16 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, 0x0}]) [ 530.119228][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 530.174033][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:16 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x2, 0x0) write$P9_RLINK(r0, 0x0, 0x0) [ 530.242475][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:16 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) [ 530.302556][T13664] kvm [13661]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:16 executing program 2: r0 = socket$inet(0x2, 0x3, 0xea) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, 0x0, 0x108) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) 10:17:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, 0x0) 10:17:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x0, 0x80000000}, 0xc) 10:17:16 executing program 1: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:16 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, 0x0}]) 10:17:16 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000002540)={0x0, 0xfffffa2c, 0x9}) 10:17:17 executing program 4: syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x1, 0x40502) 10:17:17 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 10:17:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:17 executing program 0: r0 = gettid() capget(&(0x7f0000000280)={0x20071026, r0}, &(0x7f0000000300)) 10:17:17 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, 0x0}]) 10:17:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0xea) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) [ 531.694620][T13733] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 10:17:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14}, 0x20000414}}, 0x0) [ 531.948753][T13743] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 10:17:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:18 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/47, 0x2f) 10:17:18 executing program 3: clock_nanosleep(0x0, 0x1, &(0x7f0000000440)={0x77359400}, 0x0) 10:17:18 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0}]) 10:17:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) 10:17:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x24}}, 0x0) 10:17:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:18 executing program 0: io_setup(0x0, &(0x7f0000000040)) 10:17:18 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0}]) 10:17:19 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) 10:17:19 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:19 executing program 2: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 10:17:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) close(r0) 10:17:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/213) 10:17:19 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) syz_io_uring_setup(0x85, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0}]) 10:17:19 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:19 executing program 0: socketpair(0x3, 0x0, 0x0, &(0x7f0000000100)) 10:17:19 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 10:17:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000280)) 10:17:20 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480)='/dev/input/mice\x00', 0x0) clone3(&(0x7f0000000500)={0x200000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 10:17:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 10:17:20 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20}) 10:17:20 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty}}) 10:17:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x3a2ef8f7794e1a2b, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 10:17:20 executing program 3: socket$phonet(0x23, 0x2, 0x1) 10:17:20 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3783a2653fd78cce, &(0x7f0000001400)) 10:17:21 executing program 4: getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) 10:17:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 10:17:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x6, @private, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 10:17:21 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)) 10:17:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) 10:17:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x14) 10:17:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) 10:17:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) 10:17:21 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000004980)={0x0, 0x0, &(0x7f0000004940)={0x0}}, 0x0) 10:17:21 executing program 0: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)={0x0, 0xfb, 0xfb, 0x0, 0x0, "13fabec6a75572adff11b91684d4520a", "0456d8d861c07ae8ba40b1f549cd086fb989bc114f719c87cc33fc6182cff77bc377bbadb6fe509df5628fb3ef063a7da97ed2170ff839cd83577787343e60b21499e341a544db35b9025259f5a96880acf087904d2ba2875129add49a5a2253d33e5708550fdeb3f06746607ecb165fc95ebabde8ed9f96941b4025b39adbcea0a653eb8e3bae27f40a23ec7edb1cadc92fccf2b627433f2d54abebe808bb1514b16d574e3fe34f9b3c06165526fdcb41f63ffbe5a8e0c6d3445e40f0e13ecbb6b357269735d44c1600c5dbe2cf1ca7ecef605e71d7c52ea95b63dc34fe4db10088cedb7c5f"}, 0xfb, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x80000000], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:17:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0xea) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f00000000c0)) 10:17:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}}, 0x0) 10:17:22 executing program 4: r0 = getpid() ptrace$getsig(0x4202, r0, 0x0, 0x0) [ 536.347053][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4601 10:17:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, 0x0) [ 536.428526][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 10:17:22 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) [ 536.503122][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 536.587035][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 536.630491][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:22 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dri/renderD128\x00', 0x4000, 0x0) [ 536.707508][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 536.772569][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 536.836470][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 536.896627][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 536.970899][T13853] kvm [13850]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0xfffffffffffffd2c}}, 0x0) 10:17:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)) 10:17:23 executing program 3: r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @private2, 0x1, 0x7800}}) 10:17:23 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x0, "1e8ed4a2963d55181c5c91b1e9cb5ba6dc84e75ef986c80ccaa28d9e34f91de42dea19f2470abd393a2a84e56fc5cdcefa5944437da8e9a1f272184dd2f64ad0"}) 10:17:23 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000001900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x3, 0x0, 0x0, 0x1}}, 0x26) 10:17:23 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 10:17:23 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x12, r0, 0x0) 10:17:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)) 10:17:23 executing program 3: perf_event_open(&(0x7f0000000100)={0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:17:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x8a00) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x1e4e}) 10:17:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r1, 0x0, 0x10}, 0xc) 10:17:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)) 10:17:24 executing program 4: socketpair(0x11, 0x0, 0x0, &(0x7f0000000080)) 10:17:24 executing program 2: getpid() r0 = getpid() r1 = syz_open_procfs(r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r2, 0x0, &(0x7f0000000100)) getsockopt$rose(r2, 0x104, 0x2, &(0x7f00000000c0), &(0x7f0000000040)=0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) socketpair(0x2a, 0x5, 0xc2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000580)={&(0x7f0000000140), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe39}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0x84) r6 = getpid() syz_open_procfs(r6, &(0x7f0000000080)='net/packet\x00') r7 = getpid() syz_open_procfs(r7, 0x0) r8 = getpid() mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) syz_open_procfs(r8, 0x0) syz_open_procfs(r8, 0x0) 10:17:24 executing program 0: r0 = socket(0x1e, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 10:17:24 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f00000000c0)=0x800) 10:17:24 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 10:17:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x403}, 0x14}}, 0x0) 10:17:25 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 10:17:25 executing program 4: socket$phonet_pipe(0x2, 0xa, 0x2) 10:17:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) 10:17:25 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 10:17:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) 10:17:25 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) 10:17:25 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000001900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x3}}, 0x26) 10:17:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) dup3(r1, r0, 0x80000) 10:17:25 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 10:17:25 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)) 10:17:25 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4$nfc_llcp(r0, 0x0, 0x0, 0x180000) 10:17:26 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000847000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 10:17:26 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in=@loopback}}, {{@in=@empty}, 0x0, @in6=@local}}, 0xe8) 10:17:26 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getdents64(r1, &(0x7f0000000280)=""/4096, 0x20001280) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) 10:17:26 executing program 5: ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 10:17:26 executing program 3: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001f80)={'ip6gre0\x00', &(0x7f0000001f00)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={[], [], @local}, 0x700}}) 10:17:26 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x0, 0x14}, 0xc) 10:17:26 executing program 0: openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000140)) 10:17:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}}, 0x0) 10:17:27 executing program 3: setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0xfffffffffffffe75) 10:17:27 executing program 5: ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 10:17:27 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 10:17:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) 10:17:27 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 10:17:27 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) 10:17:27 executing program 5: ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 10:17:28 executing program 3: socket$inet6_sctp(0xa, 0x3b428d2d32216a4e, 0x84) 10:17:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc0189436, &(0x7f0000000cc0)={'wg0\x00'}) 10:17:28 executing program 0: r0 = getpid() process_vm_writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/208, 0xd0}, {0x0}, {&(0x7f0000000340)=""/151, 0x97}], 0x3, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/82, 0x52}], 0x3, 0x0) 10:17:28 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x2) bind$unix(r0, &(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e) 10:17:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x18, r1, 0x403, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 10:17:28 executing program 5: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 10:17:28 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000003540)=[{{&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x80, 0x0}}], 0x1, 0x0) 10:17:28 executing program 0: msgctl$MSG_STAT_ANY(0x0, 0xb, &(0x7f0000000000)=""/243) 10:17:28 executing program 4: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r0) keyctl$revoke(0x3, r1) 10:17:29 executing program 5: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 10:17:29 executing program 1: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x200) 10:17:29 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x410301, 0x0) 10:17:29 executing program 3: setreuid(0x0, 0x0) 10:17:29 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/27, 0x1b) 10:17:29 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000180)) 10:17:29 executing program 5: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 10:17:29 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000698000/0x2000)=nil, 0x5000) shmat(r0, &(0x7f00003fe000/0xc00000)=nil, 0x225c7c9795236e17) 10:17:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1], 0x38}, 0x0) 10:17:29 executing program 4: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvme-fabrics\x00', 0x4800, 0x0) 10:17:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 10:17:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 10:17:30 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 10:17:30 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) connect(r0, 0x0, 0x0) 10:17:30 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x40305828, 0x0) 10:17:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000080)={'team0\x00'}) 10:17:30 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 10:17:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:30 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 10:17:30 executing program 1: syz_mount_image$ceph(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000c00)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000cc0)='./file0/file0\x00', 0x0) 10:17:31 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000000)) 10:17:31 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000002280), 0x10) 10:17:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) 10:17:31 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 10:17:31 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 10:17:31 executing program 1: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r0) keyctl$search(0xa, r1, &(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0) 10:17:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0}) 10:17:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:31 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') setns(r0, 0x0) 10:17:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x200001d4}}, 0x0) 10:17:32 executing program 4: socketpair(0x11, 0x0, 0x0, &(0x7f0000000000)) 10:17:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x15, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 10:17:32 executing program 3: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="a6", 0x1, 0xffffffffffffffff) 10:17:32 executing program 2: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002840), 0x0, 0x0) 10:17:32 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:17:32 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:33 executing program 4: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000940)='big_key\x00', 0x0, 0x0, 0x0, r0) 10:17:33 executing program 3: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xb0002, 0x0, [0x0, 0x0, 0x0, 0x4, 0xffff, 0x7]}) 10:17:33 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, 0x0) 10:17:33 executing program 1: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000013c0)={'ip6_vti0\x00', 0x0}) 10:17:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x305002, 0x0) sysfs$2(0x2, 0x0, &(0x7f00000000c0)=""/162) 10:17:33 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:33 executing program 4: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000f00)={'ip6gre0\x00', 0x0}) 10:17:33 executing program 3: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r0) keyctl$clear(0x7, r1) 10:17:33 executing program 5: r0 = socket(0x23, 0x80002, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:17:33 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 10:17:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0xee00, 0x0) 10:17:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f8000000160917"], 0xf8}}, 0x0) 10:17:34 executing program 3: fsopen(&(0x7f0000000080)='ocfs2\x00', 0x0) 10:17:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) 10:17:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0x0, 0xee01) 10:17:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}}, 0x0) [ 548.704964][T14134] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2326 sclass=netlink_xfrm_socket pid=14134 comm=syz-executor.4 10:17:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:34 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000000)={{0x3, @bcast}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @default]}, 0x48) 10:17:35 executing program 3: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 10:17:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x13, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xb}, @sadb_ident={0x2, 0xb}]}, 0x30}}, 0x0) 10:17:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)={0x14, 0x1, 0x3, 0x201}, 0x14}}, 0x0) 10:17:35 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) [ 549.376347][T14158] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de 10:17:35 executing program 1: getcwd(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000140)=0x2) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000080)=""/179, 0xb3) 10:17:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$mice(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x41, &(0x7f00000012c0)={'filter\x00'}, &(0x7f0000000000)=0x54) 10:17:35 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x4c}, 0x4c}}, 0x0) 10:17:35 executing program 2: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 10:17:35 executing program 5: mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 10:17:35 executing program 0: r0 = gettid() capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:36 executing program 3: keyctl$assume_authority(0x1c, 0x0) 10:17:36 executing program 4: setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0), 0xffffffe0) 10:17:36 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) 10:17:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, 0x0) 10:17:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)={0x0, 0xfb, 0xfb, 0x0, 0x0, "13fabec6a75572adff11b91684d4520a", "0456d8d861c07ae8ba40b1f549cd086fb989bc114f719c87cc33fc6182cff77bc377bbadb6fe509df5628fb3ef063a7da97ed2170ff839cd83577787343e60b21499e341a544db35b9025259f5a96880acf087904d2ba2875129add49a5a2253d33e5708550fdeb3f06746607ecb165fc95ebabde8ed9f96941b4025b39adbcea0a653eb8e3bae27f40a23ec7edb1cadc92fccf2b627433f2d54abebe808bb1514b16d574e3fe34f9b3c06165526fdcb41f63ffbe5a8e0c6d3445e40f0e13ecbb6b357269735d44c1600c5dbe2cf1ca7ecef605e71d7c52ea95b63dc34fe4db10088cedb7c5f"}, 0xfb, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x80000000], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:17:36 executing program 0: gettid() capset(0x0, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) [ 550.796266][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4601 10:17:36 executing program 3: r0 = socket(0x23, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', 0x0}) 10:17:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0xea) sendto$inet(r0, 0x0, 0x0, 0x24040085, 0x0, 0x0) [ 550.891771][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:36 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 10:17:36 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 550.966290][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 551.017278][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 551.080525][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 551.127966][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:37 executing program 0: gettid() capset(0x0, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) [ 551.188647][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 551.219847][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 551.239728][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 [ 551.288108][T14192] kvm [14185]: vcpu0, guest rIP: 0x48 disabled perfctr wrmsr: 0xc1 data 0x4600 10:17:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) 10:17:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) 10:17:37 executing program 4: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r0) add_key(&(0x7f0000000040)='blacklist\x00', 0x0, 0x0, 0x0, r1) 10:17:37 executing program 5: r0 = socket$inet(0x2, 0x3, 0xea) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) 10:17:37 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0) 10:17:37 executing program 0: gettid() capset(0x0, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x14, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x44}}, 0x0) 10:17:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14}, 0xfffffdef}}, 0x0) 10:17:38 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/nfsfs\x00') 10:17:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x0, 0x0, 0x8000000000000002, 0x0, 0x0}, 0x3c) 10:17:38 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 10:17:38 executing program 0: r0 = gettid() capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:38 executing program 3: creat(&(0x7f00000004c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 10:17:38 executing program 1: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 10:17:38 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40140, 0x0) 10:17:38 executing program 5: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0xfffffffffffffcb6) 10:17:39 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x6, 0x0) read$hidraw(r0, 0x0, 0x0) 10:17:39 executing program 0: r0 = gettid() capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:39 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, 0x0) 10:17:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x800000000000401) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$nfc_llcp(r1, &(0x7f0000006b40)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10c72fe8850000000000a7a5de3c9d3dbcd5d8b917fb92f800"/40], 0x10}], 0x2, 0x0) connect$x25(r1, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x80) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x9d0000, 0x0, 0x8, r2, 0x0, &(0x7f0000000080)={0xa10904, 0x1, [], @string=&(0x7f0000000040)}}) r3 = socket$netlink(0x10, 0x3, 0x0) dup3(r3, r0, 0x80000) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000006b40)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)={0x10}, 0x10}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x0, 0x7f, 0x7f, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0xa7, 0x20, 0x5}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x20040800) 10:17:39 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = pidfd_getfd(r1, r2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) 10:17:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 10:17:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 10:17:39 executing program 0: r0 = gettid() capset(&(0x7f0000000000)={0x0, r0}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000080)={0x1ff}, 0x0, 0x0) 10:17:39 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14}, 0xfdef) 10:17:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 10:17:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:17:40 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, 0x0) 10:17:40 executing program 0: gettid() capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:40 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000900)={'syztnl1\x00', 0x0}) 10:17:40 executing program 5: keyctl$link(0x14, 0x0, 0x0) 10:17:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40001042, 0x0) 10:17:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) close(r0) 10:17:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x40, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) socket(0x0, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 10:17:40 executing program 0: gettid() capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:41 executing program 5: r0 = socket(0x23, 0x80002, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 10:17:41 executing program 3: connect$ax25(0xffffffffffffffff, 0x0, 0x0) 10:17:41 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1b77, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040)=[r0], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)=':\x00'}, 0x10) 10:17:41 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000d80)={0x0, @can, @in, @xdp}) 10:17:41 executing program 0: gettid() capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0xd90d, 0xea, 0x9, 0x1, 0x0, 0x2}) 10:17:41 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x3, 0x4) 10:17:41 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x0) 10:17:42 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) 10:17:42 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000100)=""/47, 0xfdef) 10:17:42 executing program 0: r0 = gettid() capset(&(0x7f0000000000)={0x20071026, r0}, 0x0) 10:17:42 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) 10:17:42 executing program 5: r0 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r0, 0x0, 0x0) 10:17:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:17:42 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x70402, 0x0) 10:17:42 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) read$qrtrtun(r0, 0x0, 0x0) 10:17:42 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x83000000) 10:17:42 executing program 5: r0 = fsopen(&(0x7f0000000180)='xfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 10:17:43 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8}, 0x10) 10:17:43 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x8000, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 10:17:43 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x2, 0x101202) write$snddsp(r0, &(0x7f0000000240)="a0", 0x1) 10:17:43 executing program 1: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000180)=""/236) 10:17:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x15, 0x0, &(0x7f0000000500)) 10:17:43 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x66940) 10:17:44 executing program 5: getcwd(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x18, 0x4800000000000000}}], 0x1, 0x0) close(r0) 10:17:44 executing program 4: waitid(0x3, 0x0, 0x0, 0x2, 0x0) 10:17:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 10:17:44 executing program 1: r0 = getpgrp(0xffffffffffffffff) setpgid(r0, 0x0) 10:17:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000180000000000000001"], 0x38}, 0x0) 10:17:44 executing program 0: socketpair(0x2, 0x3, 0x0, &(0x7f0000000100)) 10:17:44 executing program 4: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) shmat(0x0, &(0x7f00003fe000/0xc00000)=nil, 0x225c7c9795236e17) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 10:17:44 executing program 2: socket(0x40000000015, 0x5, 0x0) 10:17:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r1}, 0xc) fchown(r2, 0x0, 0x0) 10:17:45 executing program 1: syz_open_dev$sg(&(0x7f0000000900)='/dev/sg#\x00', 0xcfa6, 0xc8102) 10:17:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x80000000], 0x10000}) socket(0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 559.206643][ T9113] Bluetooth: hci5: command 0x0406 tx timeout 10:17:45 executing program 0: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:17:45 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 10:17:45 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff6, 0x0) 10:17:45 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x101802, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) 10:17:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000b6c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001965a9"], 0x20}}, 0x0) 10:17:46 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x107480, 0x0) 10:17:46 executing program 4: socketpair(0x2, 0x1, 0x3, &(0x7f00000000c0)) 10:17:46 executing program 2: 10:17:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x1, 0x80, 0x400}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000280), 0x400, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000680), 0x721, r0}, 0x38) 10:17:46 executing program 3: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000000)='.\x00') 10:17:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000026c0)={'syztnl0\x00', &(0x7f0000002640)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x8, 0xf5d, 0xa, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x80, 0x2840, 0xf633}}) 10:17:46 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, 0x0, 0x0) 10:17:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0xea) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000400)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x88, {0x2, 0x0, @empty}, 'veth0_to_hsr\x00'}) 10:17:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x300}, 0x0) 10:17:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 10:17:47 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x980) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) 10:17:47 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) 10:17:47 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f0000000000)={0x1, "1e8ed4a2963d55181c5c91b1e9cb5ba6dc84e75ef986c80ccaa28d9e34f91de42dea19f2470abd393a2a84e56fc5cdcefa5944437da8e9a1f272184dd2f64ad0"}) 10:17:47 executing program 4: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c00)={'ip6gre0\x00', 0x0}) 10:17:47 executing program 0: r0 = socket$inet(0x2, 0x3, 0xea) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 10:17:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x0) 10:17:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs_stats_percpu\x00') 10:17:48 executing program 5: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000140)) 10:17:48 executing program 4: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = pidfd_getfd(r1, r2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8}, 0x10) 10:17:48 executing program 0: socket(0x22, 0x0, 0x9) 10:17:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 10:17:48 executing program 1: capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x101}) 10:17:48 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 10:17:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 10:17:48 executing program 4: r0 = socket$inet(0x2, 0x3, 0xea) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00'}, 0x18) 10:17:48 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80602) socketpair(0x1e, 0x4, 0x0, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000080), 0x4) 10:17:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8}, 0x10) 10:17:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) 10:17:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x6, 0x4, 0x9, 0x0, 0x1, 0x0, [0x2e]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) [ 563.346753][T14496] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 10:17:49 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x4800, 0x0) 10:17:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 10:17:49 executing program 1: creat(&(0x7f00000004c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='fuse\x00', 0x0, 0x0) 10:17:49 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 10:17:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 10:17:49 executing program 3: r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) 10:17:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f00000001c0)) 10:17:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r1, @ANYBLOB="af"], 0xe8}}, 0x0) 10:17:50 executing program 3: syz_mount_image$nfs(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x5, &(0x7f0000002840)=[{&(0x7f0000001540)="e50b6701bc3c655ee1", 0x9, 0x100}, {&(0x7f0000001580)="02cf5fd60d431054ab0a49ee0ecb99df", 0x10}, {&(0x7f0000001640)="9987b9", 0x3, 0x80000000}, {0x0}, {&(0x7f0000001800)="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", 0xfb0, 0x51}], 0x35500c0, &(0x7f0000002900)='^\x00') 10:17:50 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000600)={@caif=@rfm={0x25, 0x0, "12e90a0d2e9a9a5cdec38643ef2be8ca"}, {0x0}, 0x0}, 0xa0) 10:17:50 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000080)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 10:17:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000940)={0x0, 0x8000}) 10:17:50 executing program 4: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) 10:17:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@private0}}}, 0xe8) 10:17:50 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000000)) 10:17:50 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0x40049409, 0x0) 10:17:51 executing program 5: r0 = socket(0x1e, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) 10:17:51 executing program 1: lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) 10:17:51 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0x10, r0, 0x0) 10:17:51 executing program 4: mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x628a682119c04bc, 0xffffffffffffffff, 0x0) 10:17:51 executing program 0: keyctl$dh_compute(0x17, &(0x7f00000002c0), 0x0, 0x0, 0x0) 10:17:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061120007f6a894af8d1b3e2100000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:17:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='pkcs7_test\x00', 0x0) 10:17:51 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 10:17:51 executing program 4: r0 = socket(0x1e, 0x1, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 10:17:51 executing program 3: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000100)) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) 10:17:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:17:52 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) shmat(0x0, &(0x7f00003fe000/0xc00000)=nil, 0x225c7c9795236e17) shmctl$IPC_RMID(0x0, 0x0) 10:17:52 executing program 1: add_key$user(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 10:17:52 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000540)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, 0x0) 10:17:52 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000480), 0x8, 0x0) [ 566.533336][T14576] can: request_module (can-proto-0) failed. [ 566.586593][T14576] can: request_module (can-proto-0) failed. 10:17:52 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) 10:17:52 executing program 2: r0 = creat(&(0x7f00000004c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='fuse\x00', 0x0, &(0x7f00000015c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}]}}) 10:17:52 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x105000, 0x0) 10:17:52 executing program 0: capget(0x0, &(0x7f0000000040)) 10:17:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01"], 0x1c}}, 0x0) 10:17:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)=""/120, &(0x7f0000000100)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x5c4, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3f}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x80}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa3e6a}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfffffff8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x80}}, 0x0) add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="890dfedae1035f86cf7daf68a4031a05f55f401684121635", 0x18, 0x0) [ 567.334193][T14597] fuse: blksize only supported for fuseblk 10:17:53 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000001c0)) ioctl$RTC_AIE_ON(r0, 0x7001) 10:17:53 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 10:17:53 executing program 1: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:17:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x7}, 0x9c) 10:17:53 executing program 5: r0 = memfd_create(&(0x7f0000000140)='/dev/nbd#\x00', 0x0) fchown(r0, 0x0, 0x0) [ 567.710586][T14604] bond0: (slave gre1): ether type (778) is different from other slaves (1), can not enslave it [ 567.917271][T14616] bond0: (slave gre1): ether type (778) is different from other slaves (1), can not enslave it 10:17:54 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) 10:17:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x8000000) 10:17:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000080)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 10:17:54 executing program 1: getcwd(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000100100000100000077f154000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87955478759207d10604ec95ff7bcb0d639b125ec85a3678be4f50111f0a365ed1cadf3a2b3b3cb9591cc6b4dea05a8b5b29e84e4fadaa6ebe000000004dc6505d25234826a267f75c743db965041c0000000010000000ffff80b6d724c8f3569c26717df24b23c5cc93b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab917db5430ef9aec071e44cd19cc18e4e0528acd134638ab577d1786271f44d80d21ed5de4b4ca31f4253a881158f65eee871a56371893049bece676d0fbf165b08c35178e5b89379cc9df9e121a95731d088d62b0adcd501485f490b48633a73442d52503070fd87060400176b72c253c30aa4d2aa4f414b2466eb6ede0e5be402fbd4e293f6e4bcb5b4e7602d87c7513d3dcc2973e402484b45e95c97a0779e196456079c0c6c8b94c3bf030000008e71ec29a28903e807b69765f796e45d278e6742d5f1f5540fbcf6309726a1a3a90f8d5ce8056a3dcc8d4163fc1daf6f97609d8a3dd0aece1f51ab9a471aeb0a9f2dabe8f1adee705e46f6f43f7377aaf235110b80a900a0a8c45df23a4fb876fb2f487d3608e3a26f3a21add3ff2ebb9a3ca18791468698ca073f1ed46b0ebf8901035f603e30fcfff2ea4569f7bb253424fbf56008fd5183ae394b92bbc163b54248fcdcdfa72b0a8c8776cf55b6e4160bec6c41bd7aad9ce50ce949b00f6a95c2c9a25c42242a62fe0a679686408c0d09ae96baa83ed944f586e8a151e1832bf8ee22caa3f23eae6b936285d0fa47061365b5f4ef3f97a02bb61f0aef35f54dc7026ad47bfb1e6ac357a2fd335107e33b3bf3b3e3b9495805391aa2799aff2ac8b92f007c2f48215aef9ee07f1c223c8208d0eef07335e00efbc6de268c7d29128108951c0b56496b3522ca1ab585e21ccc762c61c1edbe71bda397acfa53bdab46a568277243a9afb7d4248841ee8ee8c160a933abd6324312b20f6d118cf1c78ea49a35bb0dd4ef27735c36600cdb916ed34214acc4119900ebeedbd8d4ae53929ee0d8299a8dc176274b510ebcdde73a7888b6ff51aa85bd485f52bd273b6c4b90e34625523a536737ac9765186f8d4f061440ce766e19d0ee0eb914d508b5c050f63a9facc88b4bed09a53c45f1777ca0c603bbca52aba7717154fdea6d1f31f4535eb942c4f7aafac663390ba2c9843a61bda502d1b10c653cb0d1754057827f7a417c0c5c0148cfb6a809f0c0e0610bc3fbe5f845acb4c266a2150832e809c12a65bf1dda4f72984c89b952d25e54f8175194b596b2f333645a3a795b2d536d0e3ab965c8b4ab550793a9fdabc6f6"], 0x18, 0x4800000000000000}}], 0x1, 0x0) close(r0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x80, &(0x7f0000000140)=0x2) shutdown(0xffffffffffffffff, 0x0) socket$inet(0x10, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000080)=""/179, 0xb3) 10:17:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002080)={'ip6_vti0\x00', &(0x7f0000002000)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @mcast1, @local}}) 10:17:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)=""/120, &(0x7f0000000100)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x5c4, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3f}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x80}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xa3e6a}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xfffffff8}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x80}}, 0x0) add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="890dfedae1035f86cf7daf68a4031a05f55f401684121635", 0x18, 0x0) 10:17:54 executing program 3: syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002840)=[{0x0}], 0x0, 0x0) 10:17:54 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3783a2653fd78cce, &(0x7f0000001400)) socketpair(0x0, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) 10:17:54 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000040)=""/147, 0x93) [ 568.895710][T14647] bond0: (slave gre1): ether type (778) is different from other slaves (1), can not enslave it 10:17:55 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) 10:17:55 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 10:17:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)='a', 0x1) 10:17:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0xcc}}, 0x0) 10:17:55 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) connect$pptp(r0, 0x0, 0x0) 10:17:55 executing program 3: add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, 0x0) 10:17:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000008580)={0x0, 0x0, &(0x7f0000008540)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 10:17:56 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xd81, 0x0) 10:17:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) 10:17:56 executing program 2: socket(0xaf534fe2a5d4c66d, 0x0, 0x0) 10:17:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0xaaaaaaaaaaaacba, 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)={0x0, 0xfb, 0x101, 0x0, 0x0, "13fabec6a75572adff11b91684d4520a", "0456d8d861c07ae8ba40b1f549cd086fb989bc114f719c87cc33fc6182cff77bc377bbadb6fe509df5628fb3ef063a7da97ed2170ff839cd83577787343e60b21499e341a544db35b9025259f5a96880acf087904d2ba2875129add49a5a2253d33e5708550fdeb3f06746607ecb165fc95ebabde8ed9f96941b4025b39adbcea0a653eb8e3bae27f40a23ec7edb1cadc92fccf2b627433f2d54abebe808bb1514b16d574e3fe34f9b3c06165526fdcb41f63ffbe5a8e0c6d3445e40f0e13ecbb6b357269735d44c1600c5dbe2cf1ca7ecef605e71d7c52ea95b63dc34fe4db10088cedb7c5fb0fa24d38375"}, 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x80000000], 0x10000}) r4 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:17:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:17:56 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_j1939(r0, 0x0, 0x3) 10:17:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000400)=""/4096) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80e40a0}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x424, 0x3f3, 0x20, 0x70bd27, 0x25dfdbfd, {0x4, 0x1, 0x28, [0x80000000, 0x5, 0x3, 0x0, 0x2, 0x7f, 0xfffffffb, 0x7, 0x0, 0x970, 0xfeb2, 0x7, 0x401, 0x0, 0x200, 0x0, 0x20, 0x1bd9, 0x0, 0x9, 0x5, 0x9, 0x6, 0x0, 0x3f, 0x10001, 0x3119, 0x6e, 0xff, 0x1, 0x7c1e, 0x76ba, 0x26d, 0x0, 0x0, 0x0, 0x86, 0x4, 0x0, 0x200, 0xffffffff, 0x0, 0xfff, 0x8, 0x3, 0x20, 0x0, 0xfff, 0x0, 0x4, 0x8, 0x5, 0xfffffff7, 0x0, 0x0, 0xd3f2, 0xffffffff, 0x0, 0xc31, 0x1ff, 0x0, 0x8, 0xffff, 0x7f], [0xffffff8e, 0x400, 0x0, 0xad3, 0x8, 0x5b, 0x4, 0xfffff136, 0x1, 0x3, 0x2, 0x7f, 0x3, 0x0, 0x0, 0x7ff, 0x7f92d544, 0x8, 0x6, 0x8, 0xfffffff9, 0x3f, 0x0, 0x0, 0x1, 0x5, 0x0, 0x5, 0x4, 0x899, 0x0, 0x0, 0x1e, 0x100, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0x6, 0x0, 0x4, 0x2, 0x4, 0x8000, 0x8, 0x3f, 0x7, 0x489165f6, 0x0, 0x40, 0x7715, 0x0, 0x6, 0x7, 0x800, 0x5, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x8], [0x6, 0x5, 0x4, 0x8, 0x1, 0x1, 0x9, 0x1, 0xaed, 0x400, 0x0, 0x5, 0x0, 0x7822, 0x0, 0x0, 0x0, 0x200000, 0x1f, 0x40, 0x3, 0x1, 0x0, 0x0, 0x0, 0x78da, 0xfffff335, 0x1, 0x0, 0x80000000, 0xfffffff9, 0x6, 0x9, 0x8, 0x7a4d000, 0xe6, 0x7, 0x0, 0x5, 0x1, 0x0, 0x2, 0x4, 0x2, 0x1, 0x0, 0x4, 0x3f, 0x8, 0x0, 0xa07, 0x7, 0x0, 0x0, 0x7, 0x0, 0x69, 0x1f, 0xff, 0x0, 0x5, 0x10000000, 0x7fffffff, 0x6], [0x10000, 0x1d5, 0x80000001, 0x5, 0x0, 0x80, 0x7ff, 0x3, 0x10001, 0x7, 0x2, 0x284, 0x0, 0xac00, 0x0, 0x7, 0x1, 0x1f, 0x1, 0x3, 0x101, 0x4, 0x0, 0x0, 0x1, 0x64018f6d, 0x5, 0x38e, 0x5, 0x1ba7, 0x0, 0x0, 0x40, 0x3f, 0x4, 0x25, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, 0x8000, 0xfffffff9, 0x0, 0x0, 0x3, 0x1ff, 0x8, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1f, 0x7, 0x6, 0x5, 0x5, 0x8001, 0x100, 0x9, 0x1], 0x4, [':-,\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x4080800}, 0x4) 10:17:56 executing program 0: socketpair(0x10, 0x3, 0xffffff29, &(0x7f0000000080)) 10:17:56 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x4020940d, 0x0) 10:17:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) 10:17:57 executing program 1: io_submit(0x0, 0x0, 0x0) 10:17:57 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 10:17:57 executing program 2: openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x410000, 0x0) 10:17:57 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000004980)={&(0x7f0000004840), 0xc, &(0x7f0000004940)={0x0}}, 0x0) 10:17:57 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:17:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) 10:17:58 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) 10:17:58 executing program 1: socketpair(0x1, 0x0, 0x800a85, &(0x7f0000000000)) 10:17:58 executing program 2: 10:17:58 executing program 0: 10:17:58 executing program 5: 10:17:58 executing program 4: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:17:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)='F', 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000140)=@secondary='builtin_and_secondary_trusted\x00') 10:17:58 executing program 2: add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 10:17:58 executing program 0: 10:17:58 executing program 3: 10:17:59 executing program 5: 10:17:59 executing program 4: 10:17:59 executing program 1: 10:17:59 executing program 3: 10:17:59 executing program 2: 10:17:59 executing program 0: 10:17:59 executing program 5: 10:17:59 executing program 4: 10:17:59 executing program 1: 10:18:00 executing program 3: 10:18:00 executing program 0: 10:18:00 executing program 2: 10:18:00 executing program 5: 10:18:00 executing program 4: 10:18:00 executing program 1: 10:18:00 executing program 3: 10:18:01 executing program 0: 10:18:01 executing program 2: 10:18:01 executing program 1: 10:18:01 executing program 3: 10:18:01 executing program 4: 10:18:01 executing program 5: 10:18:01 executing program 0: 10:18:01 executing program 1: 10:18:01 executing program 2: 10:18:01 executing program 5: 10:18:01 executing program 3: 10:18:01 executing program 4: 10:18:02 executing program 0: 10:18:02 executing program 1: 10:18:02 executing program 2: 10:18:02 executing program 3: 10:18:02 executing program 5: 10:18:02 executing program 4: 10:18:02 executing program 0: 10:18:02 executing program 2: 10:18:02 executing program 3: 10:18:02 executing program 1: 10:18:03 executing program 5: 10:18:03 executing program 4: 10:18:03 executing program 0: 10:18:03 executing program 3: 10:18:03 executing program 2: 10:18:03 executing program 1: 10:18:03 executing program 5: 10:18:03 executing program 4: 10:18:04 executing program 0: 10:18:04 executing program 2: 10:18:04 executing program 3: 10:18:04 executing program 1: 10:18:04 executing program 5: 10:18:04 executing program 4: 10:18:04 executing program 0: 10:18:04 executing program 3: 10:18:04 executing program 2: 10:18:05 executing program 1: 10:18:05 executing program 5: 10:18:05 executing program 4: 10:18:05 executing program 0: 10:18:05 executing program 3: 10:18:05 executing program 5: 10:18:05 executing program 4: 10:18:05 executing program 2: 10:18:05 executing program 1: 10:18:05 executing program 0: 10:18:05 executing program 3: 10:18:06 executing program 5: 10:18:06 executing program 4: 10:18:06 executing program 1: 10:18:06 executing program 2: 10:18:06 executing program 0: 10:18:06 executing program 3: 10:18:06 executing program 5: 10:18:06 executing program 4: 10:18:06 executing program 1: 10:18:06 executing program 2: 10:18:06 executing program 0: 10:18:06 executing program 3: 10:18:07 executing program 5: 10:18:07 executing program 4: 10:18:07 executing program 1: 10:18:07 executing program 2: 10:18:07 executing program 3: 10:18:07 executing program 0: 10:18:07 executing program 4: 10:18:07 executing program 5: 10:18:07 executing program 1: 10:18:07 executing program 2: 10:18:07 executing program 3: 10:18:08 executing program 0: 10:18:08 executing program 5: 10:18:08 executing program 4: 10:18:08 executing program 1: 10:18:08 executing program 2: 10:18:08 executing program 3: 10:18:08 executing program 0: 10:18:08 executing program 1: 10:18:08 executing program 5: 10:18:08 executing program 4: 10:18:09 executing program 2: 10:18:09 executing program 0: 10:18:09 executing program 3: 10:18:09 executing program 1: 10:18:09 executing program 4: 10:18:09 executing program 5: 10:18:09 executing program 2: 10:18:09 executing program 3: 10:18:09 executing program 0: 10:18:09 executing program 1: 10:18:09 executing program 4: 10:18:10 executing program 5: 10:18:10 executing program 2: 10:18:10 executing program 0: 10:18:10 executing program 1: 10:18:10 executing program 3: 10:18:10 executing program 4: 10:18:10 executing program 5: 10:18:10 executing program 2: 10:18:10 executing program 0: 10:18:10 executing program 4: 10:18:11 executing program 3: 10:18:11 executing program 1: 10:18:11 executing program 5: 10:18:11 executing program 2: 10:18:11 executing program 4: 10:18:11 executing program 0: 10:18:11 executing program 1: 10:18:11 executing program 3: 10:18:11 executing program 5: 10:18:11 executing program 2: 10:18:11 executing program 4: 10:18:11 executing program 0: 10:18:12 executing program 1: 10:18:12 executing program 3: 10:18:12 executing program 5: 10:18:12 executing program 2: 10:18:12 executing program 0: 10:18:12 executing program 4: 10:18:12 executing program 1: 10:18:12 executing program 5: 10:18:12 executing program 3: 10:18:13 executing program 2: 10:18:13 executing program 0: 10:18:13 executing program 4: 10:18:13 executing program 1: 10:18:13 executing program 2: 10:18:13 executing program 5: 10:18:13 executing program 3: 10:18:13 executing program 0: 10:18:13 executing program 4: 10:18:13 executing program 1: 10:18:14 executing program 2: 10:18:14 executing program 5: 10:18:14 executing program 3: 10:18:14 executing program 0: 10:18:14 executing program 4: 10:18:14 executing program 2: 10:18:14 executing program 1: 10:18:14 executing program 5: 10:18:14 executing program 3: 10:18:14 executing program 0: 10:18:14 executing program 4: 10:18:15 executing program 2: 10:18:15 executing program 1: 10:18:15 executing program 3: 10:18:15 executing program 5: 10:18:15 executing program 4: 10:18:15 executing program 0: 10:18:15 executing program 2: 10:18:15 executing program 3: 10:18:15 executing program 1: 10:18:15 executing program 5: 10:18:16 executing program 4: 10:18:16 executing program 0: 10:18:16 executing program 2: 10:18:16 executing program 1: 10:18:16 executing program 3: 10:18:16 executing program 5: 10:18:16 executing program 4: 10:18:16 executing program 2: 10:18:16 executing program 0: 10:18:16 executing program 3: 10:18:17 executing program 1: 10:18:17 executing program 5: 10:18:17 executing program 2: 10:18:17 executing program 4: 10:18:17 executing program 0: 10:18:17 executing program 3: 10:18:17 executing program 5: 10:18:17 executing program 1: 10:18:17 executing program 2: 10:18:17 executing program 4: 10:18:17 executing program 3: 10:18:18 executing program 0: 10:18:18 executing program 5: 10:18:18 executing program 1: 10:18:18 executing program 2: 10:18:19 executing program 3: 10:18:19 executing program 2: 10:18:19 executing program 1: 10:18:19 executing program 5: 10:18:19 executing program 0: 10:18:19 executing program 4: 10:18:20 executing program 2: 10:18:20 executing program 1: 10:18:20 executing program 3: 10:18:20 executing program 5: 10:18:20 executing program 0: 10:18:20 executing program 4: 10:18:20 executing program 2: 10:18:20 executing program 3: 10:18:20 executing program 1: 10:18:20 executing program 0: 10:18:20 executing program 4: 10:18:20 executing program 5: 10:18:21 executing program 2: 10:18:21 executing program 3: 10:18:21 executing program 0: 10:18:21 executing program 5: 10:18:21 executing program 4: 10:18:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x14, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc}]}]}}]}, 0x44}}, 0x0) 10:18:21 executing program 2: 10:18:21 executing program 3: 10:18:21 executing program 0: 10:18:22 executing program 5: 10:18:22 executing program 4: 10:18:22 executing program 2: 10:18:22 executing program 1: 10:18:22 executing program 3: 10:18:22 executing program 0: 10:18:22 executing program 5: 10:18:22 executing program 4: 10:18:22 executing program 2: 10:18:23 executing program 1: 10:18:23 executing program 3: 10:18:23 executing program 0: 10:18:23 executing program 5: 10:18:23 executing program 4: 10:18:23 executing program 1: 10:18:23 executing program 2: 10:18:23 executing program 3: 10:18:23 executing program 0: 10:18:24 executing program 5: 10:18:24 executing program 1: 10:18:24 executing program 4: 10:18:24 executing program 2: 10:18:24 executing program 3: 10:18:24 executing program 0: 10:18:24 executing program 5: 10:18:24 executing program 2: 10:18:24 executing program 1: 10:18:24 executing program 3: 10:18:24 executing program 4: 10:18:25 executing program 2: 10:18:25 executing program 0: 10:18:25 executing program 3: 10:18:25 executing program 4: 10:18:25 executing program 5: 10:18:25 executing program 1: 10:18:25 executing program 0: 10:18:25 executing program 2: 10:18:25 executing program 5: 10:18:25 executing program 4: 10:18:25 executing program 3: 10:18:26 executing program 1: 10:18:26 executing program 0: 10:18:26 executing program 2: 10:18:26 executing program 4: 10:18:26 executing program 3: 10:18:26 executing program 5: 10:18:26 executing program 1: 10:18:26 executing program 0: 10:18:26 executing program 2: 10:18:27 executing program 4: 10:18:27 executing program 3: 10:18:27 executing program 5: 10:18:27 executing program 1: 10:18:27 executing program 2: 10:18:27 executing program 0: 10:18:27 executing program 3: 10:18:27 executing program 4: 10:18:27 executing program 5: 10:18:27 executing program 0: 10:18:28 executing program 2: 10:18:28 executing program 1: 10:18:28 executing program 4: 10:18:28 executing program 3: 10:18:28 executing program 5: 10:18:28 executing program 0: 10:18:28 executing program 1: 10:18:28 executing program 2: 10:18:28 executing program 4: 10:18:28 executing program 3: 10:18:28 executing program 1: 10:18:28 executing program 5: 10:18:29 executing program 0: 10:18:29 executing program 3: 10:18:29 executing program 2: 10:18:29 executing program 4: 10:18:29 executing program 1: 10:18:29 executing program 5: 10:18:29 executing program 2: 10:18:29 executing program 3: 10:18:29 executing program 4: 10:18:29 executing program 0: 10:18:29 executing program 5: 10:18:30 executing program 1: 10:18:30 executing program 3: 10:18:30 executing program 2: 10:18:30 executing program 4: 10:18:30 executing program 0: 10:18:30 executing program 5: 10:18:30 executing program 1: 10:18:30 executing program 3: 10:18:30 executing program 2: 10:18:30 executing program 4: 10:18:30 executing program 0: 10:18:31 executing program 5: 10:18:31 executing program 1: 10:18:31 executing program 4: 10:18:31 executing program 2: 10:18:31 executing program 0: 10:18:31 executing program 3: 10:18:31 executing program 5: 10:18:31 executing program 1: 10:18:31 executing program 2: 10:18:31 executing program 0: 10:18:31 executing program 4: 10:18:32 executing program 3: 10:18:32 executing program 5: 10:18:32 executing program 1: 10:18:32 executing program 2: 10:18:32 executing program 0: 10:18:32 executing program 4: 10:18:32 executing program 3: 10:18:32 executing program 1: 10:18:32 executing program 5: 10:18:32 executing program 0: 10:18:33 executing program 2: 10:18:33 executing program 4: 10:18:33 executing program 3: 10:18:33 executing program 1: 10:18:33 executing program 5: 10:18:33 executing program 0: 10:18:33 executing program 2: 10:18:33 executing program 4: 10:18:33 executing program 3: 10:18:34 executing program 1: 10:18:34 executing program 4: 10:18:34 executing program 2: 10:18:34 executing program 0: 10:18:34 executing program 5: 10:18:34 executing program 3: 10:18:34 executing program 4: 10:18:34 executing program 5: 10:18:34 executing program 1: 10:18:34 executing program 0: 10:18:34 executing program 2: 10:18:35 executing program 3: 10:18:35 executing program 4: 10:18:35 executing program 5: 10:18:35 executing program 1: 10:18:35 executing program 2: 10:18:35 executing program 0: 10:18:35 executing program 3: 10:18:35 executing program 1: 10:18:35 executing program 4: 10:18:35 executing program 0: 10:18:35 executing program 5: 10:18:35 executing program 2: 10:18:36 executing program 3: 10:18:36 executing program 4: 10:18:36 executing program 0: 10:18:36 executing program 2: 10:18:36 executing program 1: 10:18:36 executing program 5: 10:18:36 executing program 3: 10:18:37 executing program 4: 10:18:37 executing program 1: 10:18:37 executing program 0: 10:18:37 executing program 2: 10:18:37 executing program 5: 10:18:37 executing program 3: 10:18:37 executing program 0: 10:18:37 executing program 4: 10:18:37 executing program 2: 10:18:37 executing program 1: 10:18:38 executing program 5: 10:18:38 executing program 3: 10:18:38 executing program 2: 10:18:38 executing program 4: 10:18:38 executing program 1: 10:18:38 executing program 0: 10:18:38 executing program 3: 10:18:38 executing program 5: 10:18:38 executing program 0: 10:18:39 executing program 1: 10:18:39 executing program 4: 10:18:39 executing program 2: 10:18:39 executing program 5: 10:18:39 executing program 3: 10:18:39 executing program 0: 10:18:39 executing program 1: 10:18:39 executing program 4: 10:18:39 executing program 2: 10:18:39 executing program 5: 10:18:39 executing program 3: 10:18:40 executing program 0: 10:18:40 executing program 4: 10:18:40 executing program 2: 10:18:40 executing program 1: 10:18:40 executing program 5: 10:18:40 executing program 3: 10:18:40 executing program 0: 10:18:40 executing program 4: 10:18:40 executing program 2: 10:18:40 executing program 1: 10:18:40 executing program 5: 10:18:40 executing program 3: 10:18:41 executing program 0: 10:18:41 executing program 2: 10:18:41 executing program 4: 10:18:41 executing program 1: 10:18:41 executing program 3: 10:18:41 executing program 5: 10:18:41 executing program 0: 10:18:41 executing program 4: 10:18:42 executing program 2: 10:18:42 executing program 1: 10:18:42 executing program 3: 10:18:42 executing program 5: 10:18:42 executing program 0: 10:18:42 executing program 4: 10:18:42 executing program 2: 10:18:42 executing program 1: 10:18:42 executing program 3: 10:18:42 executing program 5: 10:18:42 executing program 0: 10:18:43 executing program 2: 10:18:43 executing program 4: 10:18:43 executing program 1: 10:18:43 executing program 3: 10:18:43 executing program 5: 10:18:43 executing program 0: 10:18:43 executing program 2: 10:18:43 executing program 4: 10:18:43 executing program 1: 10:18:44 executing program 3: 10:18:44 executing program 5: 10:18:44 executing program 0: 10:18:44 executing program 2: 10:18:44 executing program 4: 10:18:44 executing program 1: 10:18:44 executing program 5: 10:18:44 executing program 0: 10:18:44 executing program 3: 10:18:44 executing program 2: 10:18:45 executing program 4: 10:18:45 executing program 1: 10:18:45 executing program 3: 10:18:45 executing program 5: 10:18:45 executing program 0: 10:18:45 executing program 2: 10:18:45 executing program 4: 10:18:45 executing program 1: 10:18:45 executing program 3: 10:18:46 executing program 5: 10:18:46 executing program 0: 10:18:46 executing program 2: 10:18:46 executing program 4: 10:18:46 executing program 1: 10:18:46 executing program 3: 10:18:46 executing program 5: 10:18:46 executing program 0: 10:18:46 executing program 2: 10:18:46 executing program 4: 10:18:47 executing program 5: 10:18:47 executing program 1: 10:18:47 executing program 3: 10:18:47 executing program 0: 10:18:47 executing program 2: 10:18:47 executing program 4: 10:18:47 executing program 1: 10:18:47 executing program 3: 10:18:47 executing program 5: 10:18:47 executing program 0: 10:18:47 executing program 2: 10:18:48 executing program 4: 10:18:48 executing program 1: 10:18:48 executing program 5: 10:18:48 executing program 3: 10:18:48 executing program 0: 10:18:48 executing program 2: 10:18:48 executing program 4: 10:18:48 executing program 1: 10:18:48 executing program 5: 10:18:48 executing program 3: 10:18:48 executing program 0: 10:18:49 executing program 2: 10:18:49 executing program 4: 10:18:49 executing program 1: 10:18:49 executing program 3: 10:18:49 executing program 5: 10:18:49 executing program 0: 10:18:49 executing program 2: 10:18:49 executing program 4: 10:18:49 executing program 1: 10:18:49 executing program 3: 10:18:49 executing program 5: 10:18:50 executing program 0: 10:18:50 executing program 4: 10:18:50 executing program 1: 10:18:50 executing program 2: 10:18:50 executing program 3: 10:18:50 executing program 5: 10:18:50 executing program 0: 10:18:50 executing program 1: 10:18:51 executing program 2: 10:18:51 executing program 4: 10:18:51 executing program 3: 10:18:51 executing program 5: 10:18:51 executing program 0: 10:18:51 executing program 1: 10:18:51 executing program 2: 10:18:51 executing program 4: 10:18:51 executing program 3: 10:18:51 executing program 0: 10:18:51 executing program 5: 10:18:52 executing program 1: 10:18:52 executing program 2: 10:18:52 executing program 3: 10:18:52 executing program 0: 10:18:52 executing program 5: 10:18:52 executing program 4: 10:18:52 executing program 1: 10:18:52 executing program 2: 10:18:52 executing program 0: 10:18:52 executing program 3: 10:18:53 executing program 5: 10:18:53 executing program 4: 10:18:53 executing program 0: 10:18:53 executing program 2: 10:18:53 executing program 1: 10:18:53 executing program 5: 10:18:53 executing program 4: 10:18:53 executing program 3: 10:18:53 executing program 0: 10:18:53 executing program 2: 10:18:54 executing program 1: 10:18:54 executing program 5: 10:18:54 executing program 3: 10:18:54 executing program 4: 10:18:54 executing program 0: 10:18:54 executing program 4: 10:18:54 executing program 3: 10:18:54 executing program 2: 10:18:54 executing program 5: 10:18:55 executing program 1: 10:18:55 executing program 3: 10:18:55 executing program 0: 10:18:55 executing program 4: 10:18:55 executing program 2: 10:18:55 executing program 1: 10:18:55 executing program 5: 10:18:56 executing program 3: 10:18:56 executing program 4: 10:18:56 executing program 5: 10:18:56 executing program 1: 10:18:56 executing program 2: 10:18:56 executing program 0: 10:18:56 executing program 3: 10:18:56 executing program 2: 10:18:56 executing program 4: 10:18:56 executing program 0: 10:18:56 executing program 5: 10:18:56 executing program 1: 10:18:57 executing program 2: 10:18:57 executing program 3: 10:18:57 executing program 0: 10:18:57 executing program 5: 10:18:57 executing program 4: 10:18:57 executing program 1: 10:18:57 executing program 3: 10:18:57 executing program 2: 10:18:57 executing program 0: 10:18:57 executing program 4: 10:18:57 executing program 5: 10:18:57 executing program 1: 10:18:58 executing program 3: 10:18:58 executing program 2: 10:18:58 executing program 0: 10:18:58 executing program 4: 10:18:58 executing program 1: 10:18:58 executing program 5: 10:18:58 executing program 3: 10:18:58 executing program 0: 10:18:59 executing program 2: 10:18:59 executing program 1: 10:18:59 executing program 4: 10:18:59 executing program 5: 10:18:59 executing program 3: 10:18:59 executing program 0: 10:18:59 executing program 2: 10:18:59 executing program 1: 10:18:59 executing program 4: 10:18:59 executing program 5: 10:18:59 executing program 3: 10:19:00 executing program 0: 10:19:00 executing program 2: 10:19:00 executing program 1: 10:19:00 executing program 4: 10:19:00 executing program 5: 10:19:00 executing program 3: 10:19:00 executing program 0: 10:19:00 executing program 2: 10:19:00 executing program 1: 10:19:00 executing program 3: 10:19:00 executing program 4: 10:19:01 executing program 5: 10:19:01 executing program 0: 10:19:01 executing program 2: 10:19:01 executing program 1: 10:19:01 executing program 3: 10:19:01 executing program 4: 10:19:01 executing program 5: 10:19:01 executing program 0: 10:19:02 executing program 1: 10:19:02 executing program 2: 10:19:02 executing program 3: 10:19:02 executing program 4: 10:19:02 executing program 5: 10:19:02 executing program 0: 10:19:02 executing program 1: 10:19:02 executing program 2: 10:19:02 executing program 4: 10:19:02 executing program 3: 10:19:02 executing program 0: 10:19:02 executing program 5: 10:19:03 executing program 2: 10:19:03 executing program 1: 10:19:03 executing program 4: 10:19:03 executing program 3: 10:19:03 executing program 0: 10:19:03 executing program 5: 10:19:03 executing program 1: 10:19:03 executing program 4: 10:19:03 executing program 2: 10:19:03 executing program 3: 10:19:03 executing program 0: 10:19:04 executing program 5: 10:19:04 executing program 4: 10:19:04 executing program 1: 10:19:04 executing program 3: 10:19:04 executing program 0: 10:19:04 executing program 2: 10:19:04 executing program 5: 10:19:04 executing program 4: 10:19:04 executing program 0: 10:19:04 executing program 3: 10:19:05 executing program 1: 10:19:05 executing program 2: 10:19:05 executing program 5: 10:19:05 executing program 0: 10:19:05 executing program 4: 10:19:05 executing program 2: 10:19:05 executing program 3: 10:19:05 executing program 1: 10:19:05 executing program 5: 10:19:05 executing program 0: 10:19:05 executing program 2: 10:19:06 executing program 4: 10:19:06 executing program 3: 10:19:06 executing program 1: 10:19:06 executing program 0: 10:19:06 executing program 5: 10:19:06 executing program 2: 10:19:06 executing program 4: 10:19:06 executing program 3: 10:19:06 executing program 1: 10:19:06 executing program 0: 10:19:06 executing program 5: 10:19:07 executing program 4: 10:19:07 executing program 2: 10:19:07 executing program 3: 10:19:07 executing program 0: 10:19:07 executing program 1: 10:19:07 executing program 5: 10:19:07 executing program 2: 10:19:07 executing program 4: 10:19:07 executing program 3: 10:19:07 executing program 0: 10:19:07 executing program 1: 10:19:07 executing program 5: 10:19:08 executing program 4: 10:19:08 executing program 2: 10:19:08 executing program 3: 10:19:08 executing program 0: 10:19:08 executing program 1: 10:19:08 executing program 2: 10:19:08 executing program 5: 10:19:08 executing program 3: 10:19:08 executing program 4: 10:19:08 executing program 0: 10:19:08 executing program 1: 10:19:09 executing program 3: 10:19:09 executing program 5: 10:19:09 executing program 2: 10:19:09 executing program 4: 10:19:09 executing program 0: 10:19:09 executing program 1: 10:19:09 executing program 5: 10:19:09 executing program 3: 10:19:09 executing program 2: 10:19:09 executing program 4: 10:19:09 executing program 0: 10:19:10 executing program 1: 10:19:10 executing program 3: 10:19:10 executing program 5: 10:19:10 executing program 2: 10:19:10 executing program 4: 10:19:10 executing program 0: 10:19:10 executing program 1: 10:19:10 executing program 3: 10:19:10 executing program 2: 10:19:10 executing program 5: 10:19:11 executing program 0: 10:19:11 executing program 4: 10:19:11 executing program 1: 10:19:11 executing program 3: 10:19:11 executing program 2: 10:19:11 executing program 0: 10:19:11 executing program 5: 10:19:12 executing program 4: 10:19:12 executing program 2: 10:19:12 executing program 0: 10:19:12 executing program 1: 10:19:12 executing program 5: 10:19:12 executing program 3: 10:19:12 executing program 4: 10:19:12 executing program 2: 10:19:12 executing program 1: 10:19:12 executing program 0: 10:19:12 executing program 5: 10:19:13 executing program 3: 10:19:13 executing program 4: 10:19:13 executing program 2: 10:19:13 executing program 5: 10:19:13 executing program 0: 10:19:13 executing program 1: 10:19:13 executing program 3: 10:19:13 executing program 4: 10:19:13 executing program 2: 10:19:13 executing program 5: 10:19:14 executing program 1: 10:19:14 executing program 0: 10:19:14 executing program 3: 10:19:14 executing program 4: 10:19:14 executing program 2: 10:19:14 executing program 5: 10:19:14 executing program 0: 10:19:14 executing program 1: 10:19:14 executing program 3: 10:19:14 executing program 4: 10:19:14 executing program 2: 10:19:15 executing program 1: 10:19:15 executing program 0: 10:19:15 executing program 5: 10:19:15 executing program 3: 10:19:15 executing program 4: 10:19:15 executing program 2: 10:19:15 executing program 1: 10:19:15 executing program 0: 10:19:15 executing program 3: 10:19:15 executing program 5: 10:19:15 executing program 4: 10:19:16 executing program 2: 10:19:16 executing program 0: 10:19:16 executing program 1: 10:19:16 executing program 3: 10:19:16 executing program 5: 10:19:16 executing program 4: 10:19:16 executing program 1: 10:19:16 executing program 2: 10:19:16 executing program 0: 10:19:16 executing program 3: 10:19:16 executing program 5: 10:19:16 executing program 4: 10:19:16 executing program 1: 10:19:17 executing program 2: 10:19:17 executing program 0: 10:19:17 executing program 5: 10:19:17 executing program 3: 10:19:17 executing program 1: 10:19:17 executing program 4: 10:19:17 executing program 0: 10:19:17 executing program 2: 10:19:17 executing program 5: 10:19:17 executing program 3: 10:19:17 executing program 1: 10:19:17 executing program 4: 10:19:18 executing program 2: 10:19:18 executing program 0: 10:19:18 executing program 5: 10:19:18 executing program 3: 10:19:18 executing program 1: 10:19:18 executing program 4: 10:19:18 executing program 2: 10:19:18 executing program 5: 10:19:18 executing program 0: 10:19:18 executing program 3: 10:19:18 executing program 1: 10:19:18 executing program 2: 10:19:19 executing program 4: 10:19:19 executing program 5: 10:19:19 executing program 3: 10:19:19 executing program 0: 10:19:19 executing program 1: 10:19:19 executing program 2: 10:19:19 executing program 4: 10:19:19 executing program 5: 10:19:19 executing program 0: 10:19:19 executing program 3: 10:19:19 executing program 1: 10:19:20 executing program 2: 10:19:20 executing program 5: 10:19:20 executing program 4: 10:19:20 executing program 0: 10:19:20 executing program 3: 10:19:20 executing program 1: 10:19:20 executing program 4: 10:19:20 executing program 5: 10:19:20 executing program 2: 10:19:20 executing program 0: 10:19:20 executing program 3: 10:19:20 executing program 1: 10:19:21 executing program 5: 10:19:21 executing program 4: 10:19:21 executing program 2: 10:19:21 executing program 3: 10:19:21 executing program 0: 10:19:21 executing program 1: 10:19:21 executing program 2: 10:19:21 executing program 5: 10:19:21 executing program 4: 10:19:21 executing program 3: 10:19:21 executing program 0: 10:19:22 executing program 1: 10:19:22 executing program 2: 10:19:22 executing program 5: 10:19:22 executing program 4: 10:19:22 executing program 3: 10:19:22 executing program 0: 10:19:22 executing program 1: 10:19:22 executing program 2: 10:19:22 executing program 4: 10:19:22 executing program 5: 10:19:22 executing program 3: 10:19:22 executing program 0: 10:19:23 executing program 1: 10:19:23 executing program 2: 10:19:23 executing program 4: 10:19:23 executing program 5: 10:19:23 executing program 3: 10:19:23 executing program 0: 10:19:23 executing program 1: 10:19:23 executing program 2: 10:19:23 executing program 4: 10:19:23 executing program 5: 10:19:23 executing program 3: 10:19:24 executing program 0: 10:19:24 executing program 1: 10:19:24 executing program 2: 10:19:24 executing program 5: 10:19:24 executing program 4: 10:19:24 executing program 3: 10:19:24 executing program 0: 10:19:24 executing program 2: 10:19:24 executing program 1: 10:19:24 executing program 5: 10:19:24 executing program 4: 10:19:25 executing program 3: 10:19:25 executing program 0: 10:19:25 executing program 1: 10:19:25 executing program 5: 10:19:25 executing program 2: 10:19:25 executing program 4: 10:19:25 executing program 3: 10:19:25 executing program 0: 10:19:25 executing program 1: 10:19:25 executing program 5: 10:19:25 executing program 2: 10:19:26 executing program 4: 10:19:26 executing program 3: 10:19:26 executing program 0: 10:19:26 executing program 1: 10:19:26 executing program 2: 10:19:26 executing program 5: 10:19:26 executing program 3: 10:19:26 executing program 4: 10:19:26 executing program 0: 10:19:26 executing program 1: 10:19:26 executing program 5: 10:19:26 executing program 2: 10:19:27 executing program 4: 10:19:27 executing program 3: 10:19:27 executing program 0: 10:19:27 executing program 5: 10:19:27 executing program 1: 10:19:27 executing program 2: 10:19:27 executing program 4: 10:19:27 executing program 0: 10:19:27 executing program 3: 10:19:28 executing program 4: 10:19:28 executing program 3: 10:19:28 executing program 5: 10:19:28 executing program 2: 10:19:28 executing program 0: 10:19:28 executing program 1: 10:19:29 executing program 3: 10:19:29 executing program 4: 10:19:29 executing program 0: 10:19:29 executing program 2: 10:19:29 executing program 5: 10:19:29 executing program 1: 10:19:29 executing program 3: 10:19:29 executing program 4: 10:19:29 executing program 0: 10:19:29 executing program 2: 10:19:29 executing program 5: 10:19:29 executing program 1: 10:19:30 executing program 0: 10:19:30 executing program 4: 10:19:30 executing program 3: 10:19:30 executing program 2: 10:19:30 executing program 5: 10:19:30 executing program 1: 10:19:30 executing program 0: 10:19:30 executing program 4: 10:19:30 executing program 2: 10:19:30 executing program 3: 10:19:31 executing program 5: 10:19:31 executing program 1: 10:19:31 executing program 0: 10:19:31 executing program 4: 10:19:31 executing program 2: 10:19:31 executing program 3: 10:19:31 executing program 5: 10:19:31 executing program 1: 10:19:31 executing program 0: 10:19:31 executing program 4: 10:19:32 executing program 2: 10:19:32 executing program 3: 10:19:32 executing program 5: 10:19:32 executing program 0: 10:19:32 executing program 1: 10:19:32 executing program 4: 10:19:32 executing program 2: 10:19:32 executing program 3: 10:19:32 executing program 5: 10:19:32 executing program 0: 10:19:32 executing program 1: 10:19:33 executing program 5: 10:19:33 executing program 4: 10:19:33 executing program 3: 10:19:33 executing program 2: 10:19:33 executing program 1: 10:19:33 executing program 0: 10:19:33 executing program 3: 10:19:33 executing program 5: 10:19:33 executing program 4: 10:19:33 executing program 2: 10:19:34 executing program 1: 10:19:34 executing program 0: 10:19:34 executing program 5: 10:19:34 executing program 4: 10:19:34 executing program 3: 10:19:34 executing program 2: 10:19:34 executing program 1: 10:19:34 executing program 0: 10:19:34 executing program 4: 10:19:34 executing program 5: 10:19:35 executing program 3: 10:19:35 executing program 2: 10:19:35 executing program 0: 10:19:35 executing program 1: 10:19:35 executing program 4: 10:19:35 executing program 2: 10:19:35 executing program 1: 10:19:35 executing program 5: 10:19:35 executing program 3: 10:19:35 executing program 0: 10:19:35 executing program 4: 10:19:36 executing program 2: 10:19:36 executing program 1: 10:19:36 executing program 3: 10:19:36 executing program 0: 10:19:36 executing program 5: 10:19:36 executing program 4: 10:19:37 executing program 2: 10:19:37 executing program 1: 10:19:37 executing program 3: 10:19:37 executing program 0: 10:19:37 executing program 5: 10:19:37 executing program 4: 10:19:37 executing program 2: 10:19:37 executing program 3: 10:19:37 executing program 1: 10:19:37 executing program 0: 10:19:37 executing program 5: 10:19:38 executing program 4: 10:19:38 executing program 2: 10:19:38 executing program 1: 10:19:38 executing program 3: 10:19:38 executing program 0: 10:19:38 executing program 4: 10:19:38 executing program 5: 10:19:38 executing program 2: 10:19:38 executing program 1: 10:19:38 executing program 3: 10:19:38 executing program 0: 10:19:39 executing program 4: 10:19:39 executing program 5: 10:19:39 executing program 2: 10:19:39 executing program 3: 10:19:39 executing program 1: 10:19:39 executing program 0: 10:19:39 executing program 2: 10:19:39 executing program 4: 10:19:39 executing program 5: 10:19:40 executing program 3: 10:19:40 executing program 1: 10:19:40 executing program 0: 10:19:40 executing program 4: 10:19:40 executing program 5: 10:19:40 executing program 2: 10:19:40 executing program 0: 10:19:40 executing program 1: 10:19:40 executing program 3: 10:19:41 executing program 4: 10:19:41 executing program 5: 10:19:41 executing program 1: 10:19:41 executing program 0: 10:19:41 executing program 2: 10:19:41 executing program 3: 10:19:41 executing program 4: 10:19:41 executing program 5: 10:19:41 executing program 0: 10:19:41 executing program 1: 10:19:41 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0:']) 10:19:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='#! ./file0 '], 0x191) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:19:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 10:19:42 executing program 5: r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x424, 0x7505, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x3, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300), 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x4, "851c6f34"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:19:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x686f) [ 676.421149][T15956] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 676.432365][T15956] overlayfs: empty lowerdir 10:19:42 executing program 1: [ 676.692459][T15962] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 676.703711][T15962] overlayfs: empty lowerdir 10:19:42 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000000)) 10:19:43 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0:']) 10:19:43 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="4d028b2b", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f100000080003"], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYRES32=r6], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) [ 677.104762][ T8711] usb 6-1: new high-speed USB device number 3 using dummy_hcd 10:19:43 executing program 0: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xf8, 0x0, &(0x7f0000000000)) 10:19:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0xa, 0x3, 0x0) [ 677.361315][ T8711] usb 6-1: Using ep0 maxpacket: 32 10:19:43 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = creat(0x0, 0x0) fallocate(r3, 0x0, 0x10000, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) lseek(r3, 0x0, 0x3) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000640)='security.capability\x00', &(0x7f0000000680)=@v2, 0x14, 0x0) [ 677.491755][ T8711] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 677.502250][ T8711] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 677.512311][ T8711] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.787764][ T29] audit: type=1804 audit(1598177983.762:10): pid=15986 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir109530065/syzkaller.JrXBHK/290/cgroup.controllers" dev="sda1" ino=16373 res=1 [ 677.852245][ T8711] usb 6-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice= 0.40 [ 677.861672][ T8711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.870156][ T8711] usb 6-1: Product: syz [ 677.875031][ T8711] usb 6-1: Manufacturer: syz [ 677.879768][ T8711] usb 6-1: SerialNumber: syz 10:19:44 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="20188281f3a1"}, 0x14) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x20000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x34e, 0x0, 0x0) [ 678.138736][T15966] raw-gadget gadget: fail, usb_ep_enable returned -22 10:19:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x2c, 0x2, {{0x0, 0x0, 0x0, 0x1}, [@TCA_NETEM_CORR={0x10}]}}}]}, 0x5c}}, 0x0) 10:19:44 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) removexattr(&(0x7f0000000380)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) setuid(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file1\x00', 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, &(0x7f0000000400)) syz_genetlink_get_family_id$ethtool(0x0) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000640)='security.capability\x00', &(0x7f0000000680)=@v2, 0x14, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chown(&(0x7f0000000300)='./bus/file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x5433, 0x0) [ 678.236098][T15966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 678.527928][T16004] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 678.563675][T15966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 678.596078][T15966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 678.649903][T16008] overlayfs: filesystem on './bus' not supported as upperdir [ 678.659479][T16004] overlayfs: missing 'lowerdir' [ 679.115150][ T8711] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 679.122362][ T8711] smsc75xx v1.0.0 [ 679.162268][T16017] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 679.341359][T15966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 679.349637][T15966] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 679.508700][T16020] overlayfs: maximum fs stacking depth exceeded [ 679.563152][T16020] overlayfs: filesystem on './bus' not supported as upperdir [ 679.703936][ T8711] ===================================================== [ 679.710996][ T8711] BUG: KMSAN: uninit-value in smsc75xx_bind+0x5c9/0x11e0 [ 679.718025][ T8711] CPU: 0 PID: 8711 Comm: kworker/0:3 Not tainted 5.8.0-rc5-syzkaller #0 [ 679.726343][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.736450][ T8711] Workqueue: usb_hub_wq hub_event [ 679.741479][ T8711] Call Trace: [ 679.744936][ T8711] dump_stack+0x21c/0x280 [ 679.749319][ T8711] kmsan_report+0xf7/0x1e0 [ 679.753743][ T8711] __msan_warning+0x58/0xa0 [ 679.758279][ T8711] smsc75xx_bind+0x5c9/0x11e0 [ 679.762978][ T8711] ? smsc75xx_write_wuff+0xa60/0xa60 [ 679.768314][ T8711] usbnet_probe+0x1152/0x3f90 [ 679.773014][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 679.778223][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 679.783430][ T8711] ? kmsan_set_origin_checked+0x95/0xf0 [ 679.788988][ T8711] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 679.795080][ T8711] ? usbnet_disconnect+0x670/0x670 [ 679.800256][ T8711] usb_probe_interface+0xece/0x1550 [ 679.805473][ T8711] ? usb_register_driver+0x900/0x900 [ 679.810857][ T8711] really_probe+0xf20/0x20b0 [ 679.815460][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 679.820680][ T8711] driver_probe_device+0x293/0x390 [ 679.825811][ T8711] __device_attach_driver+0x63f/0x830 [ 679.831204][ T8711] bus_for_each_drv+0x2ca/0x3f0 [ 679.836066][ T8711] ? coredump_store+0xf0/0xf0 [ 679.840764][ T8711] __device_attach+0x4e2/0x7f0 [ 679.845553][ T8711] device_initial_probe+0x4a/0x60 [ 679.850590][ T8711] bus_probe_device+0x177/0x3d0 [ 679.855453][ T8711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 679.861270][ T8711] device_add+0x3b0e/0x40d0 [ 679.865806][ T8711] usb_set_configuration+0x380f/0x3f10 [ 679.871280][ T8711] ? usb_set_configuration+0xb41/0x3f10 [ 679.876854][ T8711] usb_generic_driver_probe+0x138/0x300 [ 679.882406][ T8711] ? usb_choose_configuration+0xe70/0xe70 [ 679.888129][ T8711] usb_probe_device+0x311/0x490 [ 679.892991][ T8711] ? usb_register_device_driver+0x540/0x540 [ 679.898895][ T8711] really_probe+0xf20/0x20b0 [ 679.903499][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 679.908710][ T8711] driver_probe_device+0x293/0x390 [ 679.913922][ T8711] __device_attach_driver+0x63f/0x830 [ 679.919315][ T8711] bus_for_each_drv+0x2ca/0x3f0 [ 679.924177][ T8711] ? coredump_store+0xf0/0xf0 [ 679.928873][ T8711] __device_attach+0x4e2/0x7f0 [ 679.933658][ T8711] device_initial_probe+0x4a/0x60 [ 679.938700][ T8711] bus_probe_device+0x177/0x3d0 [ 679.943569][ T8711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 679.949420][ T8711] device_add+0x3b0e/0x40d0 [ 679.954053][ T8711] usb_new_device+0x1bd4/0x2a30 [ 679.958931][ T8711] hub_event+0x5e7b/0x8a70 [ 679.963418][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 679.968628][ T8711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 679.974443][ T8711] ? led_work+0x7c0/0x7c0 [ 679.978869][ T8711] process_one_work+0x1688/0x2140 [ 679.983949][ T8711] worker_thread+0x10bc/0x2730 [ 679.988723][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 679.993948][ T8711] kthread+0x551/0x590 [ 679.998630][ T8711] ? process_one_work+0x2140/0x2140 [ 680.003842][ T8711] ? kthread_blkcg+0x110/0x110 [ 680.008641][ T8711] ret_from_fork+0x1f/0x30 [ 680.013061][ T8711] [ 680.015389][ T8711] Local variable ----buf.i87@smsc75xx_bind created at: [ 680.022243][ T8711] smsc75xx_bind+0x485/0x11e0 [ 680.026924][ T8711] smsc75xx_bind+0x485/0x11e0 [ 680.031603][ T8711] ===================================================== [ 680.038526][ T8711] Disabling lock debugging due to kernel taint [ 680.044672][ T8711] Kernel panic - not syncing: panic_on_warn set ... [ 680.051268][ T8711] CPU: 0 PID: 8711 Comm: kworker/0:3 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 680.060983][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.071052][ T8711] Workqueue: usb_hub_wq hub_event [ 680.076076][ T8711] Call Trace: [ 680.079381][ T8711] dump_stack+0x21c/0x280 [ 680.083802][ T8711] panic+0x4d7/0xef7 [ 680.087725][ T8711] ? add_taint+0x17c/0x210 [ 680.092154][ T8711] kmsan_report+0x1df/0x1e0 [ 680.096668][ T8711] __msan_warning+0x58/0xa0 [ 680.101181][ T8711] smsc75xx_bind+0x5c9/0x11e0 [ 680.105863][ T8711] ? smsc75xx_write_wuff+0xa60/0xa60 [ 680.111153][ T8711] usbnet_probe+0x1152/0x3f90 [ 680.115857][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.121065][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.126270][ T8711] ? kmsan_set_origin_checked+0x95/0xf0 [ 680.131849][ T8711] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 680.137938][ T8711] ? usbnet_disconnect+0x670/0x670 [ 680.143072][ T8711] usb_probe_interface+0xece/0x1550 [ 680.148289][ T8711] ? usb_register_driver+0x900/0x900 [ 680.153636][ T8711] really_probe+0xf20/0x20b0 [ 680.158240][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.163455][ T8711] driver_probe_device+0x293/0x390 [ 680.168593][ T8711] __device_attach_driver+0x63f/0x830 [ 680.173984][ T8711] bus_for_each_drv+0x2ca/0x3f0 [ 680.178843][ T8711] ? coredump_store+0xf0/0xf0 [ 680.183535][ T8711] __device_attach+0x4e2/0x7f0 [ 680.188323][ T8711] device_initial_probe+0x4a/0x60 [ 680.193363][ T8711] bus_probe_device+0x177/0x3d0 [ 680.198240][ T8711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 680.204066][ T8711] device_add+0x3b0e/0x40d0 [ 680.208596][ T8711] usb_set_configuration+0x380f/0x3f10 [ 680.214434][ T8711] ? usb_set_configuration+0xb41/0x3f10 [ 680.220054][ T8711] usb_generic_driver_probe+0x138/0x300 [ 680.225611][ T8711] ? usb_choose_configuration+0xe70/0xe70 [ 680.231336][ T8711] usb_probe_device+0x311/0x490 [ 680.236199][ T8711] ? usb_register_device_driver+0x540/0x540 [ 680.242103][ T8711] really_probe+0xf20/0x20b0 [ 680.246705][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.252849][ T8711] driver_probe_device+0x293/0x390 [ 680.257974][ T8711] __device_attach_driver+0x63f/0x830 [ 680.263359][ T8711] bus_for_each_drv+0x2ca/0x3f0 [ 680.268214][ T8711] ? coredump_store+0xf0/0xf0 [ 680.272911][ T8711] __device_attach+0x4e2/0x7f0 [ 680.277695][ T8711] device_initial_probe+0x4a/0x60 [ 680.282724][ T8711] bus_probe_device+0x177/0x3d0 [ 680.287584][ T8711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 680.293400][ T8711] device_add+0x3b0e/0x40d0 [ 680.297928][ T8711] usb_new_device+0x1bd4/0x2a30 [ 680.302797][ T8711] hub_event+0x5e7b/0x8a70 [ 680.307261][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.312465][ T8711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 680.318269][ T8711] ? led_work+0x7c0/0x7c0 [ 680.322609][ T8711] process_one_work+0x1688/0x2140 [ 680.327657][ T8711] worker_thread+0x10bc/0x2730 [ 680.332430][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.337652][ T8711] kthread+0x551/0x590 [ 680.341728][ T8711] ? process_one_work+0x2140/0x2140 [ 680.346959][ T8711] ? kthread_blkcg+0x110/0x110 [ 680.351732][ T8711] ret_from_fork+0x1f/0x30 [ 680.357058][ T8711] ------------[ cut here ]------------ [ 680.362876][ T8711] kernel BUG at mm/kmsan/kmsan.h:87! [ 680.368197][ T8711] invalid opcode: 0000 [#1] SMP [ 680.373029][ T8711] CPU: 0 PID: 8711 Comm: kworker/0:3 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 680.382733][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.392775][ T8711] Workqueue: usb_hub_wq hub_event [ 680.397783][ T8711] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 680.404345][ T8711] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 680.423941][ T8711] RSP: 0018:ffff888061b22648 EFLAGS: 00010046 [ 680.429981][ T8711] RAX: 0000000000000002 RBX: 00000000066e0003 RCX: 00000000066e0003 [ 680.437925][ T8711] RDX: 0000000000000000 RSI: 0000000000000180 RDI: ffff888061b2272c [ 680.445870][ T8711] RBP: ffff888061b226f0 R08: ffffea000000000f R09: ffff88812fffa000 [ 680.453814][ T8711] R10: 0000000000000002 R11: ffff88812d248000 R12: 0000000000000000 [ 680.461851][ T8711] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 680.469807][ T8711] FS: 0000000000000000(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 680.478710][ T8711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.485268][ T8711] CR2: 00000000f54ed090 CR3: 000000010228a000 CR4: 00000000001406f0 [ 680.493216][ T8711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 680.501161][ T8711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 680.509104][ T8711] Call Trace: [ 680.512379][ T8711] kmsan_check_memory+0xd/0x10 [ 680.517168][ T8711] iowrite8+0x99/0x300 [ 680.521271][ T8711] pvpanic_panic_notify+0xb7/0xe0 [ 680.526281][ T8711] ? pvpanic_mmio_remove+0x60/0x60 [ 680.531374][ T8711] atomic_notifier_call_chain+0x123/0x290 [ 680.537072][ T8711] panic+0x560/0xef7 [ 680.540962][ T8711] ? add_taint+0x17c/0x210 [ 680.545356][ T8711] kmsan_report+0x1df/0x1e0 [ 680.549835][ T8711] __msan_warning+0x58/0xa0 [ 680.554317][ T8711] smsc75xx_bind+0x5c9/0x11e0 [ 680.558990][ T8711] ? smsc75xx_write_wuff+0xa60/0xa60 [ 680.564250][ T8711] usbnet_probe+0x1152/0x3f90 [ 680.568904][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.574095][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.579269][ T8711] ? kmsan_set_origin_checked+0x95/0xf0 [ 680.584805][ T8711] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 680.590867][ T8711] ? usbnet_disconnect+0x670/0x670 [ 680.595960][ T8711] usb_probe_interface+0xece/0x1550 [ 680.601147][ T8711] ? usb_register_driver+0x900/0x900 [ 680.606416][ T8711] really_probe+0xf20/0x20b0 [ 680.610987][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.616190][ T8711] driver_probe_device+0x293/0x390 [ 680.621283][ T8711] __device_attach_driver+0x63f/0x830 [ 680.626722][ T8711] bus_for_each_drv+0x2ca/0x3f0 [ 680.631547][ T8711] ? coredump_store+0xf0/0xf0 [ 680.636388][ T8711] __device_attach+0x4e2/0x7f0 [ 680.641135][ T8711] device_initial_probe+0x4a/0x60 [ 680.646134][ T8711] bus_probe_device+0x177/0x3d0 [ 680.650978][ T8711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 680.656764][ T8711] device_add+0x3b0e/0x40d0 [ 680.661258][ T8711] usb_set_configuration+0x380f/0x3f10 [ 680.666700][ T8711] ? usb_set_configuration+0xb41/0x3f10 [ 680.672241][ T8711] usb_generic_driver_probe+0x138/0x300 [ 680.677865][ T8711] ? usb_choose_configuration+0xe70/0xe70 [ 680.683565][ T8711] usb_probe_device+0x311/0x490 [ 680.688573][ T8711] ? usb_register_device_driver+0x540/0x540 [ 680.694449][ T8711] really_probe+0xf20/0x20b0 [ 680.699030][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.704235][ T8711] driver_probe_device+0x293/0x390 [ 680.709326][ T8711] __device_attach_driver+0x63f/0x830 [ 680.714679][ T8711] bus_for_each_drv+0x2ca/0x3f0 [ 680.719506][ T8711] ? coredump_store+0xf0/0xf0 [ 680.724162][ T8711] __device_attach+0x4e2/0x7f0 [ 680.728915][ T8711] device_initial_probe+0x4a/0x60 [ 680.733916][ T8711] bus_probe_device+0x177/0x3d0 [ 680.738743][ T8711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 680.744523][ T8711] device_add+0x3b0e/0x40d0 [ 680.749013][ T8711] usb_new_device+0x1bd4/0x2a30 [ 680.753846][ T8711] hub_event+0x5e7b/0x8a70 [ 680.758269][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.763449][ T8711] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 680.769334][ T8711] ? led_work+0x7c0/0x7c0 [ 680.773654][ T8711] process_one_work+0x1688/0x2140 [ 680.778715][ T8711] worker_thread+0x10bc/0x2730 [ 680.783466][ T8711] ? kmsan_get_metadata+0x116/0x180 [ 680.789524][ T8711] kthread+0x551/0x590 [ 680.793578][ T8711] ? process_one_work+0x2140/0x2140 [ 680.798784][ T8711] ? kthread_blkcg+0x110/0x110 [ 680.803530][ T8711] ret_from_fork+0x1f/0x30 [ 680.807922][ T8711] Modules linked in: [ 680.811802][ T8711] ---[ end trace 921d973727e4af9f ]--- [ 680.817244][ T8711] RIP: 0010:kmsan_internal_check_memory+0x3c0/0x3d0 [ 680.823806][ T8711] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 48 c7 c7 b0 63 e1 91 31 c0 e8 f8 02 30 ff 0f 0b 0f 0b 0f 0b 0f 0b e8 c2 13 b0 0e 0f 0b <0f> 0b 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 83 ff [ 680.843394][ T8711] RSP: 0018:ffff888061b22648 EFLAGS: 00010046 [ 680.849431][ T8711] RAX: 0000000000000002 RBX: 00000000066e0003 RCX: 00000000066e0003 [ 680.857391][ T8711] RDX: 0000000000000000 RSI: 0000000000000180 RDI: ffff888061b2272c [ 680.865339][ T8711] RBP: ffff888061b226f0 R08: ffffea000000000f R09: ffff88812fffa000 [ 680.873297][ T8711] R10: 0000000000000002 R11: ffff88812d248000 R12: 0000000000000000 [ 680.881307][ T8711] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000001 [ 680.889255][ T8711] FS: 0000000000000000(0000) GS:ffff88812fc00000(0000) knlGS:0000000000000000 [ 680.898196][ T8711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.904766][ T8711] CR2: 00000000f54ed090 CR3: 000000010228a000 CR4: 00000000001406f0 [ 680.912720][ T8711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 680.920677][ T8711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 680.928636][ T8711] Kernel panic - not syncing: Fatal exception [ 680.935260][ T8711] Kernel Offset: disabled [ 680.939576][ T8711] Rebooting in 86400 seconds..